PatchTheCVEmarmind vulnerabilities
Recent CVEs affecting marmind products. 3 tracked.
marmind has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-11-05. Highest priority: CVE-2020-26507 (score 48/100).
- CVE-2020-26507 HIGH 7.8 DOWNGRADE A CSV Injection (also known as Formula Injection) vulnerability in the Marmind web application with version 4.
- CVE-2020-26506 MEDIUM 4.3 DOWNGRADE An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with
- CVE-2020-26505 MEDIUM 6.1 DOWNGRADE A Stored Cross-Site Scripting (XSS) vulnerability in the “Marmind” web application with version 4.1.141.0 allo
FAQ
How do I fix marmind vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is marmind being exploited right now?
None of the tracked marmind CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which marmind CVE should I patch first?
CVE-2020-26507 currently ranks highest (48/100): A CSV Injection (also known as Formula Injection) vulnerability in the Marmind web application with version 4..