PatchTheCVEflexmonster vulnerabilities
Recent CVEs affecting flexmonster products. 4 tracked.
flexmonster has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-12-17. Highest priority: CVE-2020-20142 (score 47/100).
- CVE-2020-20142 MEDIUM 6.1 DOWNGRADE Cross Site Scripting (XSS) vulnerability in the "To Remote CSV" component under "Open" Menu in Flexmonster Piv
- CVE-2020-20141 MEDIUM 6.1 DOWNGRADE Cross Site Scripting (XSS) vulnerability in the To OLAP (XMLA) component Under the Connect menu in Flexmonster
- CVE-2020-20140 MEDIUM 6.1 DOWNGRADE Cross Site Scripting (XSS) vulnerability in Remote Report component under the Open menu in Flexmonster Pivot T
- CVE-2020-20139 MEDIUM 6.1 DOWNGRADE Cross Site Scripting (XSS) vulnerability in the Remote JSON component Under the Connect menu in Flexmonster Pi
FAQ
How do I fix flexmonster vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is flexmonster being exploited right now?
None of the tracked flexmonster CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which flexmonster CVE should I patch first?
CVE-2020-20142 currently ranks highest (47/100): Cross Site Scripting (XSS) vulnerability in the "To Remote CSV" component under "Open" Menu in Flexmonster Piv.