PatchTheCVEstonesoft vulnerabilities
Recent CVEs affecting stonesoft products. 2 tracked.
stonesoft has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2009-12-04. Highest priority: CVE-2009-2631 (score 47/100).
- CVE-2009-2631 MEDIUM 6.8 MITIGATE MITIGATE Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; Sonic
- CVE-2007-5793 HIGH 7.1 UPGRADE Stonesoft StoneGate IPS before 4.0 does not properly decode Fullwidth/Halfwidth Unicode encoded data, which ma
FAQ
How do I fix stonesoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is stonesoft being exploited right now?
None of the tracked stonesoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which stonesoft CVE should I patch first?
CVE-2009-2631 currently ranks highest (47/100): Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; Sonic.