PatchTheCVEveridiumid vulnerabilities
Recent CVEs affecting veridiumid products. 4 tracked.
veridiumid has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-04-03. Highest priority: CVE-2023-44039 (score 48/100).
- CVE-2023-45552 MEDIUM 6.5 UPGRADE In VeridiumID before 3.5.0, a stored cross-site scripting (XSS) vulnerability has been discovered in the admin
- CVE-2023-44040 MEDIUM 6.1 UPGRADE In VeridiumID before 3.5.0, the identity provider page is susceptible to a cross-site scripting (XSS) vulnerab
- CVE-2023-44039 CRITICAL 9.1 UPGRADE In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker (who can pass enrollm
- CVE-2023-44038 MEDIUM 6.5 UPGRADE In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover informat
FAQ
How do I fix veridiumid vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is veridiumid being exploited right now?
None of the tracked veridiumid CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which veridiumid CVE should I patch first?
CVE-2023-44039 currently ranks highest (48/100): In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker (who can pass enrollm.