PatchTheCVEovidentia vulnerabilities
Recent CVEs affecting ovidentia products. 8 tracked.
ovidentia has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-02-17. Highest priority: CVE-2022-22914 (score 54/100).
- CVE-2022-22914 HIGH 7.5 DOWNGRADE An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attac
- CVE-2021-29343 MEDIUM 5.4 UPGRADE Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php
- CVE-2019-13978 HIGH 8.8 DOWNGRADE Ovidentia 8.4.3 has SQL Injection via the id parameter in an index.php?tg=delegat&idx=mem request.
- CVE-2019-13977 MEDIUM 5.4 DOWNGRADE index.php in Ovidentia 8.4.3 has XSS via tg=groups, tg=maildoms&idx=create&userid=0&bgrp=y, tg=delegat, tg=sit
- CVE-2018-1000619 HIGH 8.8 UPGRADE Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, bab_getAddo
- CVE-2008-4423 MEDIUM 6.5 DOWNGRADE SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL c
- CVE-2008-3918 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL c
- CVE-2008-3917 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to inject arb
FAQ
How do I fix ovidentia vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ovidentia being exploited right now?
None of the tracked ovidentia CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ovidentia CVE should I patch first?
CVE-2022-22914 currently ranks highest (54/100): An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attac.