PatchTheCVEoceanicsoft vulnerabilities
Recent CVEs affecting oceanicsoft products. 5 tracked.
oceanicsoft has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-09-27. Highest priority: CVE-2024-8607 (score 50/100).
- CVE-2024-8644 HIGH 7.5 UPGRADE Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protoc
- CVE-2024-8643 CRITICAL 9.8 UPGRADE Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking. This issue
- CVE-2024-8609 HIGH 7.5 UPGRADE Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System
- CVE-2024-8608 MEDIUM 5.4 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in O
- CVE-2024-8607 CRITICAL 9.8 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oceanic
FAQ
How do I fix oceanicsoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is oceanicsoft being exploited right now?
None of the tracked oceanicsoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which oceanicsoft CVE should I patch first?
CVE-2024-8607 currently ranks highest (50/100): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oceanic .