PatchTheCVElansweeper vulnerabilities
Recent CVEs affecting lansweeper products. 10 tracked.
lansweeper has 10 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-12-15. Highest priority: CVE-2022-29517 (score 64/100).
- CVE-2022-32763 MEDIUM 6.1 DOWNGRADE A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lan
- CVE-2022-32573 CRITICAL 9.9 DOWNGRADE A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lanswee
- CVE-2022-29517 CRITICAL 9.9 DOWNGRADE A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweepe
- CVE-2022-29511 MEDIUM 6.5 DOWNGRADE A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality o
- CVE-2022-28703 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionalit
- CVE-2022-27498 MEDIUM 6.5 DOWNGRADE A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionali
- CVE-2022-22149 HIGH 8.8 DOWNGRADE A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9
- CVE-2022-21234 HIGH 8.8 DOWNGRADE An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2
- CVE-2022-21210 HIGH 8.8 DOWNGRADE An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper lansweeper 9.1.20.2
- CVE-2022-21145 MEDIUM 4.8 DOWNGRADE A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lans
FAQ
How do I fix lansweeper vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lansweeper being exploited right now?
None of the tracked lansweeper CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lansweeper CVE should I patch first?
CVE-2022-29517 currently ranks highest (64/100): A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweepe.