PatchTheCVEtrivantis vulnerabilities
Recent CVEs affecting trivantis products. 10 tracked.
trivantis has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2013-09-06. Highest priority: CVE-2013-3599 (score 53/100).
- CVE-2013-5708 MEDIUM 6.8 DOWNGRADE Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it
- CVE-2013-5707 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow r
- CVE-2013-5706 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow r
- CVE-2013-3605 MEDIUM 6.8 DOWNGRADE Cross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remo
- CVE-2013-3604 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.6 allow r
- CVE-2013-3603 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote atta
- CVE-2013-3602 HIGH 7.5 DOWNGRADE SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System (LMS) 6.6 allo
- CVE-2013-3601 MEDIUM 6.0 DOWNGRADE Coursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls, which allows re
- CVE-2013-3600 HIGH 8.5 DOWNGRADE Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to gain privileges via a mod
- CVE-2013-3599 HIGH 9.3 DOWNGRADE userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privi
FAQ
How do I fix trivantis vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is trivantis being exploited right now?
None of the tracked trivantis CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which trivantis CVE should I patch first?
CVE-2013-3599 currently ranks highest (53/100): userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privi.