PatchTheCVEipswitch vulnerabilities
Recent CVEs affecting ipswitch products. 10 tracked.
ipswitch has 10 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 9. Most recent: 2019-10-31. Highest priority: CVE-2019-16383 (score 66/100).
- CVE-2019-18465 CRITICAL 9.8 UPGRADE In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to
- CVE-2019-18464 CRITICAL 9.8 UPGRADE In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.0 before 11.0.4 (2019.0.4), and 11.1 before 11.1.3
- CVE-2019-16383 CRITICAL 9.4 UPGRADE MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 befor
- CVE-2019-12146 CRITICAL 9.1 UPGRADE A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before
- CVE-2019-12145 HIGH 7.5 UPGRADE A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before
- CVE-2019-12144 CRITICAL 9.8 UPGRADE An issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1
- CVE-2018-6545 MEDIUM 6.1 DOWNGRADE Ipswitch MoveIt v8.1 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability, as demonstrated by hu
- CVE-2017-16513 HIGH 7.8 UPGRADE Ipswitch WS_FTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup loc
- CVE-2017-12639 CRITICAL 9.8 UPGRADE Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to exe
- CVE-2017-12638 CRITICAL 9.8 UPGRADE Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to exe
FAQ
How do I fix ipswitch vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ipswitch being exploited right now?
None of the tracked ipswitch CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ipswitch CVE should I patch first?
CVE-2019-16383 currently ranks highest (66/100): MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 befor.