intersystems vulnerabilities

Recent CVEs affecting intersystems products. 3 tracked.

intersystems has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-07-11. Highest priority: CVE-2018-17152 (score 41/100).

• CVE-2018-17152 MEDIUM 6.4 DOWNGRADE Intersystems Cache 2017.2.2.865.0 allows XXE.
• CVE-2018-17151 MEDIUM 5.4 DOWNGRADE Intersystems Cache 2017.2.2.865.0 has Incorrect Access Control.
• CVE-2018-17150 MEDIUM 6.1 DOWNGRADE Intersystems Cache 2017.2.2.865.0 allows XSS.

FAQ

How do I fix intersystems vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is intersystems being exploited right now?

None of the tracked intersystems CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which intersystems CVE should I patch first?

CVE-2018-17152 currently ranks highest (41/100): Intersystems Cache 2017.2.2.865.0 allows XXE..

Products

• cache

RSS feed for intersystems · ← Back to latest CVEs