PatchTheCVEmbedthis software vulnerabilities
Recent CVEs affecting mbedthis software products. 5 tracked.
mbedthis software has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-06-04. Highest priority: CVE-2004-2315 (score 42/100).
- CVE-2007-3009 MEDIUM 4.3 DOWNGRADE Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build
- CVE-2007-3008 MEDIUM 4.3 DOWNGRADE Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to r
- CVE-2004-2317 MEDIUM 5.0 DOWNGRADE Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive
- CVE-2004-2315 MEDIUM 5.0 DOWNGRADE Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an e
- CVE-2004-2213 MEDIUM 5.0 DOWNGRADE Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (
FAQ
How do I fix mbedthis software vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mbedthis software being exploited right now?
None of the tracked mbedthis software CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mbedthis software CVE should I patch first?
CVE-2004-2315 currently ranks highest (42/100): Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an e.