PatchTheCVEsaleslogix corporation vulnerabilities
Recent CVEs affecting saleslogix corporation products. 8 tracked.
saleslogix corporation has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2004-10-18. Highest priority: CVE-2004-1605 (score 52/100).
- CVE-2004-1612 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .
- CVE-2004-1611 MEDIUM 5.1 MITIGATE DOWNGRADE SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could
- CVE-2004-1610 HIGH 7.5 MITIGATE DOWNGRADE SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticat
- CVE-2004-1609 MEDIUM 5.0 MITIGATE DOWNGRADE SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP respon
- CVE-2004-1608 HIGH 7.5 MITIGATE DOWNGRADE SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via
- CVE-2004-1607 MEDIUM 5.0 MITIGATE DOWNGRADE slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2)
- CVE-2004-1606 MEDIUM 6.4 MITIGATE DOWNGRADE slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an inva
- CVE-2004-1605 HIGH 7.5 MITIGATE DOWNGRADE SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Adm
FAQ
How do I fix saleslogix corporation vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is saleslogix corporation being exploited right now?
None of the tracked saleslogix corporation CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which saleslogix corporation CVE should I patch first?
CVE-2004-1605 currently ranks highest (52/100): SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Adm.