PatchTheCVEriverbed vulnerabilities
Recent CVEs affecting riverbed products. 8 tracked.
riverbed has 8 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 7. Most recent: 2022-06-03. Highest priority: CVE-2021-42786 (score 60/100).
- CVE-2021-43271 MEDIUM 6.8 DOWNGRADE Riverbed AppResponse 11.8.0, 11.8.5, 11.8.5a, 11.9.0, 11.9.0a, 11.10.0, 11.11.0, 11.11.0a, 11.11.1, 11.11.1a,
- CVE-2021-42857 MEDIUM 5.3 UPGRADE It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDaServlet has directo
- CVE-2021-42856 MEDIUM 4.7 UPGRADE It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack
- CVE-2021-42855 HIGH 7.8 UPGRADE It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) uses the ".debug_command.con
- CVE-2021-42854 CRITICAL 9.8 UPGRADE It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) PluginServlet has director
- CVE-2021-42853 CRITICAL 9.1 UPGRADE It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDiagnosticServlet has
- CVE-2021-42787 CRITICAL 9.4 UPGRADE It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentConfigurationServlet
- CVE-2021-42786 CRITICAL 9.8 UPGRADE It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) has Remote Code Execution vu
FAQ
How do I fix riverbed vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is riverbed being exploited right now?
None of the tracked riverbed CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which riverbed CVE should I patch first?
CVE-2021-42786 currently ranks highest (60/100): It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) has Remote Code Execution vu.