PatchTheCVEsandline vulnerabilities
Recent CVEs affecting sandline products. 3 tracked.
sandline has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-11-18. Highest priority: CVE-2019-12271 (score 65/100).
- CVE-2019-12311 MEDIUM 6.1 MITIGATE Sandline Centraleyezer (On Premises) allows Unrestricted File Upload leading to Stored XSS
- CVE-2019-12299 MEDIUM 6.1 MITIGATE Sandline Centraleyezer (On Premises) allows Stored XSS using HTML entities in the name field of the Category s
- CVE-2019-12271 CRITICAL 9.8 MITIGATE Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type, because the featur
FAQ
How do I fix sandline vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sandline being exploited right now?
None of the tracked sandline CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sandline CVE should I patch first?
CVE-2019-12271 currently ranks highest (65/100): Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type, because the featur.