PatchTheCVEinvisionpower vulnerabilities
Recent CVEs affecting invisionpower products. 4 tracked.
invisionpower has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2015-09-04. Highest priority: CVE-2012-5692 (score 64/100).
- CVE-2015-6810 LOW 3.5 DOWNGRADE Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Bo
- CVE-2014-9239 HIGH 7.5 DOWNGRADE DOWNGRADE SQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) in Invision Power
- CVE-2014-3149 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.3.x and 3.4.x t
- CVE-2012-5692 HIGH 10.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x t
FAQ
How do I fix invisionpower vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is invisionpower being exploited right now?
None of the tracked invisionpower CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which invisionpower CVE should I patch first?
CVE-2012-5692 currently ranks highest (64/100): Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x t.