intesync vulnerabilities

Recent CVEs affecting intesync products. 9 tracked.

intesync has 9 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-12-12. Highest priority: CVE-2019-16246 (score 66/100).

• CVE-2019-17428 MEDIUM 5.9 DOWNGRADE An issue was discovered in Intesync Solismed 3.3sp1
• CVE-2019-16246 CRITICAL 9.8 DOWNGRADE Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931
• CVE-2019-15936 CRITICAL 9.8 DOWNGRADE Intesync Solismed 3.3sp allows Insecure File Upload.
• CVE-2019-15935 MEDIUM 6.1 DOWNGRADE Intesync Solismed 3.3sp has XSS.
• CVE-2019-15934 HIGH 8.8 DOWNGRADE Intesync Solismed 3.3sp has CSRF.
• CVE-2019-15933 CRITICAL 9.8 DOWNGRADE Intesync Solismed 3.3sp has SQL Injection.
• CVE-2019-15932 CRITICAL 9.8 DOWNGRADE Intesync Solismed 3.3sp has Incorrect Access Control.
• CVE-2019-15931 CRITICAL 9.8 DOWNGRADE Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246.
• CVE-2019-15930 MEDIUM 4.3 DOWNGRADE Intesync Solismed 3.3sp allows Clickjacking.

FAQ

How do I fix intesync vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is intesync being exploited right now?

None of the tracked intesync CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which intesync CVE should I patch first?

CVE-2019-16246 currently ranks highest (66/100): Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931.

Products

• solismed

RSS feed for intesync · ← Back to latest CVEs