PatchTheCVEhyweb vulnerabilities
Recent CVEs affecting hyweb products. 2 tracked.
hyweb has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-01-22. Highest priority: CVE-2021-22847 (score 50/100).
- CVE-2021-22849 MEDIUM 4.6 UPGRADE Hyweb HyCMS-J1 backend editing function does not filter special characters
- CVE-2021-22847 HIGH 8.8 UPGRADE Hyweb HyCMS-J1's API fail to filter POST request parameters
FAQ
How do I fix hyweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hyweb being exploited right now?
None of the tracked hyweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hyweb CVE should I patch first?
CVE-2021-22847 currently ranks highest (50/100): Hyweb HyCMS-J1's API fail to filter POST request parameters.