PatchTheCVEesi products vulnerabilities
Recent CVEs affecting esi products products. 7 tracked.
esi products has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2005-12-05. Highest priority: CVE-2005-2286 (score 56/100).
- CVE-2005-4029 MEDIUM 5.0 UPGRADE WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login
- CVE-2005-4002 MEDIUM 4.0 UPGRADE WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to dec
- CVE-2005-2286 HIGH 10.0 UPGRADE WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileg
- CVE-2005-2285 MEDIUM 5.0 UPGRADE WebEOC before 6.0.2 stores sensitive information in locations such as URIs, web pages, and configuration files
- CVE-2005-2284 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in WebEOC before 6.0.2 allow remote attackers to modify SQL statements
- CVE-2005-2283 LOW 2.1 UPGRADE WebEOC before 6.0.2 does not properly restrict the size of an uploaded file, which allows remote authenticated
- CVE-2005-2282 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in WebEOC before 6.0.2 allow remote attackers to inject ar
FAQ
How do I fix esi products vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is esi products being exploited right now?
None of the tracked esi products CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which esi products CVE should I patch first?
CVE-2005-2286 currently ranks highest (56/100): WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileg.