PatchTheCVEgenesys vulnerabilities
Recent CVEs affecting genesys products. 3 tracked.
genesys has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-08-13. Highest priority: CVE-2023-29930 (score 51/100).
- CVE-2022-37775 MEDIUM 6.1 UPGRADE Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within
- CVE-2023-29930 HIGH 8.8 MITIGATE An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker
- CVE-2023-23208 MEDIUM 6.1 UPGRADE Genesys Administrator Extension (GAX) before 9.0.105.15 is vulnerable to Cross Site Scripting (XSS) via the Bu
FAQ
How do I fix genesys vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is genesys being exploited right now?
None of the tracked genesys CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which genesys CVE should I patch first?
CVE-2023-29930 currently ranks highest (51/100): An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker .