PatchTheCVEkonzept-ix vulnerabilities
Recent CVEs affecting konzept-ix products. 5 tracked.
konzept-ix has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2020-10-27. Highest priority: CVE-2020-27183 (score 57/100).
- CVE-2020-27183 CRITICAL 9.8 UPGRADE A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attacker
- CVE-2020-27182 MEDIUM 6.1 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in konzept-ix publiXone before 2020.015 allow remote attac
- CVE-2020-27181 MEDIUM 6.5 UPGRADE A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows atta
- CVE-2020-27180 HIGH 7.5 UPGRADE konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID pa
- CVE-2020-27179 CRITICAL 9.8 UPGRADE konzept-ix publiXone before 2020.015 allows attackers to take over arbitrary user accounts by crafting passwor
FAQ
How do I fix konzept-ix vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is konzept-ix being exploited right now?
None of the tracked konzept-ix CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which konzept-ix CVE should I patch first?
CVE-2020-27183 currently ranks highest (57/100): A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attacker.