PatchTheCVEsmartstore vulnerabilities
Recent CVEs affecting smartstore products. 7 tracked.
smartstore has 7 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 6. Most recent: 2021-05-19. Highest priority: CVE-2021-32608 (score 69/100).
- CVE-2021-32608 CRITICAL 9.8 UPGRADE An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1
- CVE-2021-32607 CRITICAL 9.8 UPGRADE An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1
- CVE-2020-36365 MEDIUM 6.1 UPGRADE Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApp
- CVE-2020-36364 CRITICAL 9.1 UPGRADE An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0
- CVE-2020-27997 HIGH 8.8 UPGRADE An issue was discovered in SmartStoreNET before 4.1.0
- CVE-2020-27996 HIGH 8.8 UPGRADE An issue was discovered in SmartStoreNET before 4.0.1
- CVE-2020-15243 CRITICAL 9.1 DOWNGRADE Affected versions of Smartstore have a missing WebApi Authentication attribute
FAQ
How do I fix smartstore vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is smartstore being exploited right now?
None of the tracked smartstore CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which smartstore CVE should I patch first?
CVE-2021-32608 currently ranks highest (69/100): An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.