PatchTheCVEluxsoft vulnerabilities
Recent CVEs affecting luxsoft products. 4 tracked.
luxsoft has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-02-18. Highest priority: CVE-2025-25222 (score 55/100).
- CVE-2025-25224 HIGH 7.5 UPGRADE The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missin
- CVE-2025-25223 MEDIUM 5.3 UPGRADE The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path t
- CVE-2025-25222 CRITICAL 9.8 UPGRADE The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL i
- CVE-2025-25221 CRITICAL 9.8 UPGRADE The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL i
FAQ
How do I fix luxsoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is luxsoft being exploited right now?
None of the tracked luxsoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which luxsoft CVE should I patch first?
CVE-2025-25222 currently ranks highest (55/100): The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL i.