PatchTheCVEjenzabar vulnerabilities
Recent CVEs affecting jenzabar products. 5 tracked.
jenzabar has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2021-02-06. Highest priority: CVE-2019-10011 (score 60/100).
- CVE-2021-26723 MEDIUM 6.1 UPGRADE Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.
- CVE-2020-8434 CRITICAL 9.8 UPGRADE Jenzabar JICS (aka Internet Campus Solution) before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch 2, and 9.2 before 9.
- CVE-2019-10012 HIGH 7.5 DOWNGRADE UPGRADE Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and execute arbitrary
- CVE-2019-10011 CRITICAL 9.8 UPGRADE ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before 2019-02-06 allows rem
- CVE-2018-16778 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject ar
FAQ
How do I fix jenzabar vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jenzabar being exploited right now?
None of the tracked jenzabar CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jenzabar CVE should I patch first?
CVE-2019-10011 currently ranks highest (60/100): ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before 2019-02-06 allows rem.