PatchTheCVEuochm vulnerabilities
Recent CVEs affecting uochm products. 3 tracked.
uochm has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-04-13. Highest priority: CVE-2008-6719 (score 52/100).
- CVE-2008-6719 HIGH 7.5 DOWNGRADE U&M Software Event Lister (aka JustListIt) 1.0 does not require administrative authentication for all scripts
- CVE-2008-6718 HIGH 7.5 DOWNGRADE U&M Software JustBookIt 1.0 does not require administrative authentication for all scripts in the admin/ direc
- CVE-2008-6717 HIGH 7.5 DOWNGRADE U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ d
FAQ
How do I fix uochm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is uochm being exploited right now?
None of the tracked uochm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which uochm CVE should I patch first?
CVE-2008-6719 currently ranks highest (52/100): U&M Software Event Lister (aka JustListIt) 1.0 does not require administrative authentication for all scripts .