PatchTheCVEfibranet vulnerabilities
Recent CVEs affecting fibranet products. 4 tracked.
fibranet has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-01-27. Highest priority: CVE-2013-7070 (score 67/100).
- CVE-2021-3325 CRITICAL 9.8 DOWNGRADE MITIGATE Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an in
- CVE-2018-7649 MEDIUM 6.1 UPGRADE Monitorix before 3.10.1 allows XSS via CGI variables.
- CVE-2013-7071 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in the handle_request function in lib/HTTPServer.pm in Monitorix befo
- CVE-2013-7070 CRITICAL 9.8 UPGRADE The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute
FAQ
How do I fix fibranet vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fibranet being exploited right now?
None of the tracked fibranet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fibranet CVE should I patch first?
CVE-2013-7070 currently ranks highest (67/100): The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute .