PatchTheCVEeasyvirt vulnerabilities
Recent CVEs affecting easyvirt products. 8 tracked.
easyvirt has 8 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-05-19. Highest priority: CVE-2024-55062 (score 61/100).
- CVE-2024-57587 CRITICAL 9.1 UPGRADE UPGRADE Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauth
- CVE-2024-55064 MEDIUM 5.4 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in EasyVirt DC NetScope <= 8.6.4 allow remote attackers to
- CVE-2024-55063 HIGH 8.8 UPGRADE Multiple Code Injection vulnerabilities in EasyVirt DC NetScope <= 8.7.0 allows remote authenticated attackers
- CVE-2024-55062 CRITICAL 9.8 UPGRADE UPGRADE Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated
- CVE-2024-53357 HIGH 7.5 UPGRADE UPGRADE Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authen
- CVE-2024-53356 CRITICAL 9.8 UPGRADE UPGRADE Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to g
- CVE-2024-53355 HIGH 8.8 UPGRADE UPGRADE Multiple incorrect access control issues in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote auth
- CVE-2024-53354 MEDIUM 6.5 UPGRADE UPGRADE Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authen
FAQ
How do I fix easyvirt vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is easyvirt being exploited right now?
None of the tracked easyvirt CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which easyvirt CVE should I patch first?
CVE-2024-55062 currently ranks highest (61/100): Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated .