PatchTheCVEepesi vulnerabilities
Recent CVEs affecting epesi products. 10 tracked.
epesi has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2017-06-14. Highest priority: CVE-2017-9624 (score 42/100).
- CVE-2017-9624 MEDIUM 6.1 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers
- CVE-2017-9623 MEDIUM 6.1 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers
- CVE-2017-9622 MEDIUM 6.1 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers
- CVE-2017-9621 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in modules/Base/Lang/Administrator/update_translation.php in EPESI in
- CVE-2017-9366 MEDIUM 4.8 UPGRADE Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Base/Dashboar
- CVE-2017-6491 MEDIUM 6.1 DOWNGRADE Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1
- CVE-2017-6490 MEDIUM 6.1 DOWNGRADE Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1
- CVE-2017-6489 MEDIUM 6.1 DOWNGRADE Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1
- CVE-2017-6488 MEDIUM 6.1 DOWNGRADE Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1
- CVE-2017-6487 MEDIUM 6.1 DOWNGRADE Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1
FAQ
How do I fix epesi vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is epesi being exploited right now?
None of the tracked epesi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which epesi CVE should I patch first?
CVE-2017-9624 currently ranks highest (42/100): Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers .