PatchTheCVEiss-oberlausitz vulnerabilities
Recent CVEs affecting iss-oberlausitz products. 2 tracked.
iss-oberlausitz has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-04-03. Highest priority: CVE-2022-38923 (score 65/100).
- CVE-2022-38923 CRITICAL 9.8 UPGRADE BluePage CMS thru v3.9 processes an insufficiently sanitized HTTP Header allowing MySQL Injection in the 'User
- CVE-2022-38922 CRITICAL 9.8 UPGRADE BluePage CMS thru 3.9 processes an insufficiently sanitized HTTP Header Cookie value allowing MySQL Injection
FAQ
How do I fix iss-oberlausitz vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is iss-oberlausitz being exploited right now?
None of the tracked iss-oberlausitz CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which iss-oberlausitz CVE should I patch first?
CVE-2022-38923 currently ranks highest (65/100): BluePage CMS thru v3.9 processes an insufficiently sanitized HTTP Header allowing MySQL Injection in the 'User.