PatchTheCVEtellme vulnerabilities
Recent CVEs affecting tellme products. 2 tracked.
tellme has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-12-31. Highest priority: CVE-2005-4700 (score 41/100).
- CVE-2005-4700 MEDIUM 5.0 DOWNGRADE TellMe 1.2 and earlier, when the Server (o_Server) and HEAD (o_Head) options are enabled, allows remote attack
- CVE-2005-4698 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier allows remote attackers to inject arbitrary
FAQ
How do I fix tellme vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tellme being exploited right now?
None of the tracked tellme CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tellme CVE should I patch first?
CVE-2005-4700 currently ranks highest (41/100): TellMe 1.2 and earlier, when the Server (o_Server) and HEAD (o_Head) options are enabled, allows remote attack.