PatchTheCVEronds vulnerabilities
Recent CVEs affecting ronds products. 2 tracked.
ronds has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-01-17. Highest priority: CVE-2022-2893 (score 47/100).
- CVE-2022-3091 HIGH 7.5 DOWNGRADE RONDS EPM version 1.19.5 has a vulnerability in which a function could allow unauthenticated users to leak cr
- CVE-2022-2893 HIGH 8.2 DOWNGRADE RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized
FAQ
How do I fix ronds vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ronds being exploited right now?
None of the tracked ronds CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ronds CVE should I patch first?
CVE-2022-2893 currently ranks highest (47/100): RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized.