PatchTheCVEexadel vulnerabilities
Recent CVEs affecting exadel products. 3 tracked.
exadel has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-06-11. Highest priority: CVE-2017-3202 (score 68/100).
- CVE-2017-3206 CRITICAL 9.8 DOWNGRADE The Java implementation of AMF3 deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows
- CVE-2017-3202 CRITICAL 9.8 DOWNGRADE The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0, may al
- CVE-2017-3201 HIGH 8.1 DOWNGRADE The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0 derives
FAQ
How do I fix exadel vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is exadel being exploited right now?
None of the tracked exadel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which exadel CVE should I patch first?
CVE-2017-3202 currently ranks highest (68/100): The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0, may al.