PatchTheCVEesoftplanner vulnerabilities
Recent CVEs affecting esoftplanner products. 6 tracked.
esoftplanner has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-11-20. Highest priority: CVE-2024-48530 (score 48/100).
- CVE-2024-48536 HIGH 7.5 DOWNGRADE Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by
- CVE-2024-48535 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in eSoft Planner 3.24.08271-USA allows attackers to execute
- CVE-2024-48534 MEDIUM 5.4 DOWNGRADE A reflected cross-site scripting (XSS) vulnerability on the Camp Details module of eSoft Planner 3.24.08271-US
- CVE-2024-48533 MEDIUM 5.3 DOWNGRADE A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSof
- CVE-2024-48531 MEDIUM 5.4 DOWNGRADE A reflected cross-site scripting (XSS) vulnerability on the Rental Availability module of eSoft Planner 3.24.0
- CVE-2024-48530 HIGH 7.5 DOWNGRADE An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to
FAQ
How do I fix esoftplanner vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is esoftplanner being exploited right now?
None of the tracked esoftplanner CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which esoftplanner CVE should I patch first?
CVE-2024-48530 currently ranks highest (48/100): An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to.