PatchTheCVEorpak vulnerabilities
Recent CVEs affecting orpak products. 6 tracked.
orpak has 6 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 6. Most recent: 2019-06-03. Highest priority: CVE-2017-14728 (score 63/100).
- CVE-2017-14854 CRITICAL 9.1 UPGRADE A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution
- CVE-2017-14853 HIGH 8.6 UPGRADE The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due t
- CVE-2017-14852 HIGH 8.6 UPGRADE An insecure communication was found between a user and the Orpak SiteOmat management console for all known ver
- CVE-2017-14851 CRITICAL 9.8 UPGRADE A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25
- CVE-2017-14850 MEDIUM 6.1 UPGRADE All known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored
- CVE-2017-14728 CRITICAL 9.8 UPGRADE An authentication bypass was found in an unknown area of the SiteOmat source code
FAQ
How do I fix orpak vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is orpak being exploited right now?
None of the tracked orpak CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which orpak CVE should I patch first?
CVE-2017-14728 currently ranks highest (63/100): An authentication bypass was found in an unknown area of the SiteOmat source code.