kent-web vulnerabilities
Recent CVEs affecting kent-web products. 8 tracked.
kent-web has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2015-02-28. Highest priority: CVE-2015-0889 (score 48/100).
- CVE-2015-0889 HIGH 7.5 UPGRADE KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently ex
- CVE-2015-0888 MEDIUM 6.4 UPGRADE KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified vectors.
- CVE-2014-7258 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in KENT-WEB Clip Board 2.91 and earlier, when running certain version
- CVE-2014-0812 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in KENT-WEB Joyful Note 2.8 and earlier, when Internet Explorer 7 or
- CVE-2013-3649 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier
- CVE-2013-3648 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in KENT-WEB POST-MAIL before 6.7, when Internet Explorer 7 or earlier
- CVE-2012-5176 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to
- CVE-2012-5175 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 4.2 and earlier allows remote attackers to
FAQ
How do I fix kent-web vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kent-web being exploited right now?
None of the tracked kent-web CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kent-web CVE should I patch first?
CVE-2015-0889 currently ranks highest (48/100): KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently ex.