PatchTheCVEextensis vulnerabilities
Recent CVEs affecting extensis products. 9 tracked.
extensis has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-03-01. Highest priority: CVE-2022-24254 (score 57/100).
- CVE-2022-24255 HIGH 8.8 DOWNGRADE Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain adminis
- CVE-2022-24254 HIGH 8.8 DOWNGRADE An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 a
- CVE-2022-24253 HIGH 8.8 DOWNGRADE Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via
- CVE-2022-24252 HIGH 8.8 DOWNGRADE An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allo
- CVE-2022-24251 HIGH 8.8 DOWNGRADE Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via
- CVE-2017-18006 MEDIUM 6.1 MITIGATE netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID O
- CVE-2013-3946 HIGH 7.8 UPGRADE Heap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers t
- CVE-2013-3945 HIGH 7.8 UPGRADE The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a
- CVE-2013-3944 HIGH 7.8 UPGRADE Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers
FAQ
How do I fix extensis vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is extensis being exploited right now?
None of the tracked extensis CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which extensis CVE should I patch first?
CVE-2022-24254 currently ranks highest (57/100): An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 a.