PatchTheCVEmv vulnerabilities
Recent CVEs affecting mv products. 4 tracked.
mv has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-06-02. Highest priority: CVE-2020-23283 (score 55/100).
- CVE-2022-30496 HIGH 7.5 DOWNGRADE SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads i
- CVE-2020-23284 HIGH 7.5 DOWNGRADE Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx p
- CVE-2020-23283 HIGH 7.5 DOWNGRADE Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid
- CVE-2020-23282 HIGH 7.5 DOWNGRADE SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing
FAQ
How do I fix mv vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mv being exploited right now?
None of the tracked mv CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mv CVE should I patch first?
CVE-2020-23283 currently ranks highest (55/100): Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid .