PatchTheCVEnewrelic vulnerabilities
Recent CVEs affecting newrelic products. 2 tracked.
newrelic has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2017-06-13. Highest priority: CVE-2017-9246 (score 66/100).
- CVE-2017-9246 CRITICAL 9.8 UPGRADE New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving fail
- CVE-2013-0284 MEDIUM 5.0 DOWNGRADE Ruby agent 3.2.0 through 3.5.2 serializes sensitive data when communicating with servers operated by New Relic
FAQ
How do I fix newrelic vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is newrelic being exploited right now?
None of the tracked newrelic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which newrelic CVE should I patch first?
CVE-2017-9246 currently ranks highest (66/100): New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving fail.