PatchTheCVEnovnc vulnerabilities
Recent CVEs affecting novnc products. 1 tracked.
novnc has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-09-25. Highest priority: CVE-2017-18635 (score 54/100).
- CVE-2017-18635 MEDIUM 6.1 UPGRADE MITIGATE An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrar
FAQ
How do I fix novnc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is novnc being exploited right now?
None of the tracked novnc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which novnc CVE should I patch first?
CVE-2017-18635 currently ranks highest (54/100): An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrar.