PatchTheCVEopendolphin vulnerabilities
Recent CVEs affecting opendolphin products. 3 tracked.
opendolphin has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2018-11-15. Highest priority: CVE-2018-16161 (score 48/100).
- CVE-2018-16163 MEDIUM 6.5 UPGRADE OpenDolphin 2.7.0 and earlier allows authenticated attackers to bypass authentication to create and/or delete
- CVE-2018-16162 HIGH 8.8 UPGRADE OpenDolphin 2.7.0 and earlier allows authenticated attackers to obtain other users credentials such as a user
- CVE-2018-16161 HIGH 8.8 UPGRADE OpenDolphin 2.7.0 and earlier allows authenticated users to gain administrative privileges and perform uninten
FAQ
How do I fix opendolphin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is opendolphin being exploited right now?
None of the tracked opendolphin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which opendolphin CVE should I patch first?
CVE-2018-16161 currently ranks highest (48/100): OpenDolphin 2.7.0 and earlier allows authenticated users to gain administrative privileges and perform uninten.