PatchTheCVEopenidm project vulnerabilities
Recent CVEs affecting openidm project products. 3 tracked.
openidm project has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2017-04-09. Highest priority: CVE-2017-7589 (score 44/100).
- CVE-2017-7591 MEDIUM 6.1 UPGRADE OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting (XSS) attacks within the Admin
- CVE-2017-7590 MEDIUM 6.1 UPGRADE OpenIDM through 4.0.0 and 4.5.0 is vulnerable to persistent cross-site scripting (XSS) attacks within the Admi
- CVE-2017-7589 MEDIUM 6.5 UPGRADE In OpenIDM through 4.0.0 before 4.5.0, the info endpoint may leak sensitive information upon a request by the
FAQ
How do I fix openidm project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openidm project being exploited right now?
None of the tracked openidm project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openidm project CVE should I patch first?
CVE-2017-7589 currently ranks highest (44/100): In OpenIDM through 4.0.0 before 4.5.0, the info endpoint may leak sensitive information upon a request by the .