PatchTheCVEprominent vulnerabilities
Recent CVEs affecting prominent products. 5 tracked.
prominent has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-10-17. Highest priority: CVE-2017-14005 (score 49/100).
- CVE-2017-14013 MEDIUM 5.6 MITIGATE A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller
- CVE-2017-14011 HIGH 8.8 MITIGATE A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface
- CVE-2017-14009 MEDIUM 6.5 MITIGATE An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface
- CVE-2017-14007 MEDIUM 5.6 MITIGATE An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface
- CVE-2017-14005 HIGH 8.8 MITIGATE An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface
FAQ
How do I fix prominent vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is prominent being exploited right now?
None of the tracked prominent CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which prominent CVE should I patch first?
CVE-2017-14005 currently ranks highest (49/100): An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface.