PatchTheCVEepignosishq vulnerabilities
Recent CVEs affecting epignosishq products. 3 tracked.
epignosishq has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-03-03. Highest priority: CVE-2019-5069 (score 57/100).
- CVE-2020-28597 HIGH 7.5 DOWNGRADE A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21
- CVE-2019-5070 MEDIUM 6.5 UPGRADE An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.
- CVE-2019-5069 HIGH 8.8 UPGRADE A code execution vulnerability exists in Epignosis eFront LMS v5.2.12
FAQ
How do I fix epignosishq vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is epignosishq being exploited right now?
None of the tracked epignosishq CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which epignosishq CVE should I patch first?
CVE-2019-5069 currently ranks highest (57/100): A code execution vulnerability exists in Epignosis eFront LMS v5.2.12.