PatchTheCVEvalicert vulnerabilities
Recent CVEs affecting valicert products. 4 tracked.
valicert has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2001-12-04. Highest priority: CVE-2001-0950 (score 55/100).
- CVE-2001-0950 HIGH 7.5 UPGRADE ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently ran
- CVE-2001-0949 HIGH 7.5 DOWNGRADE Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Ser
- CVE-2001-0948 HIGH 7.5 DOWNGRADE Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 a
- CVE-2001-0947 HIGH 7.5 DOWNGRADE Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attack
FAQ
How do I fix valicert vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is valicert being exploited right now?
None of the tracked valicert CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which valicert CVE should I patch first?
CVE-2001-0950 currently ranks highest (55/100): ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently ran.