PatchTheCVEnetegrity vulnerabilities
Recent CVEs affecting netegrity products. 3 tracked.
netegrity has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2004-08-18. Highest priority: CVE-2004-0425 (score 58/100).
- CVE-2004-0672 MEDIUM 6.8 DOWNGRADE DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity
- CVE-2004-0425 HIGH 10.0 DOWNGRADE Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code
- CVE-2001-1455 HIGH 7.5 DOWNGRADE Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode
FAQ
How do I fix netegrity vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is netegrity being exploited right now?
None of the tracked netegrity CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which netegrity CVE should I patch first?
CVE-2004-0425 currently ranks highest (58/100): Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code.