PatchTheCVEektron vulnerabilities
Recent CVEs affecting ektron products. 9 tracked.
ektron has 9 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 6. Most recent: 2017-10-30. Highest priority: CVE-2012-5357 (score 69/100).
- CVE-2016-6201 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0
- CVE-2016-6133 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in Ektron Content Management System before 9.1.0.184SP3(9.1.0.184.3.1
- CVE-2015-4427 LOW 3.5 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Managemen
- CVE-2015-3624 MEDIUM 5.8 UPGRADE Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektro
- CVE-2015-0931 MEDIUM 6.8 DOWNGRADE Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parse
- CVE-2015-0923 MEDIUM 5.0 DOWNGRADE The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8
- CVE-2014-2729 LOW 3.5 DOWNGRADE Cross-site scripting (XSS) vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote auth
- CVE-2012-5358 CRITICAL 9.8 UPGRADE The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XS
- CVE-2012-5357 CRITICAL 9.8 UPGRADE Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript s
FAQ
How do I fix ektron vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ektron being exploited right now?
None of the tracked ektron CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ektron CVE should I patch first?
CVE-2012-5357 currently ranks highest (69/100): Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript s.