PatchTheCVEobm vulnerabilities
Recent CVEs affecting obm products. 5 tracked.
obm has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2012-08-31. Highest priority: CVE-2011-5141 (score 44/100).
- CVE-2011-5145 MEDIUM 5.5 UPGRADE Multiple SQL injection vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably earlier allow
- CVE-2011-5144 MEDIUM 5.0 UPGRADE Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote attackers to obtain configuration informat
- CVE-2011-5143 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 2.3.20 and probably earl
- CVE-2011-5142 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably
- CVE-2011-5141 MEDIUM 6.0 UPGRADE Directory traversal vulnerability in exportcsv/exportcsv_index.php in Open Business Management (OBM) 2.4.0-rc1
FAQ
How do I fix obm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is obm being exploited right now?
None of the tracked obm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which obm CVE should I patch first?
CVE-2011-5141 currently ranks highest (44/100): Directory traversal vulnerability in exportcsv/exportcsv_index.php in Open Business Management (OBM) 2.4.0-rc1.