PatchTheCVEuniversis vulnerabilities
Recent CVEs affecting universis products. 2 tracked.
universis has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-05-18. Highest priority: CVE-2022-29603 (score 52/100).
- CVE-2022-29603 HIGH 8.1 UPGRADE A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select parameter to mul
- CVE-2022-28924 MEDIUM 6.5 UPGRADE An information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to obtain sensiti
FAQ
How do I fix universis vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is universis being exploited right now?
None of the tracked universis CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which universis CVE should I patch first?
CVE-2022-29603 currently ranks highest (52/100): A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select parameter to mul.