PatchTheCVEtelaxius vulnerabilities
Recent CVEs affecting telaxius products. 7 tracked.
telaxius has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2017-09-22. Highest priority: CVE-2017-14717 (score 42/100).
- CVE-2017-8763 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in modules/Base/Box/check_for_new_version.php in EPESI in Telaxus/EPE
- CVE-2017-14717 MEDIUM 5.4 UPGRADE In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.
- CVE-2017-14716 MEDIUM 5.4 UPGRADE In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter.
- CVE-2017-14715 MEDIUM 5.4 UPGRADE In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter.
- CVE-2017-14714 MEDIUM 5.4 UPGRADE In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter.
- CVE-2017-14713 MEDIUM 5.4 UPGRADE In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter.
- CVE-2017-14712 MEDIUM 5.4 UPGRADE In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.
FAQ
How do I fix telaxius vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is telaxius being exploited right now?
None of the tracked telaxius CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which telaxius CVE should I patch first?
CVE-2017-14717 currently ranks highest (42/100): In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter..