PatchTheCVEwebport vulnerabilities
Recent CVEs affecting webport products. 7 tracked.
webport has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2021-06-24. Highest priority: CVE-2020-18667 (score 62/100).
- CVE-2020-23659 MEDIUM 5.4 DOWNGRADE WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature.
- CVE-2020-18668 MEDIUM 5.4 UPGRADE Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcall
- CVE-2020-18667 CRITICAL 9.8 UPGRADE SQL Injection vulnerability in WebPort <=1.19.1 via the new connection, parameter name in type-conn.
- CVE-2020-18665 MEDIUM 5.3 UPGRADE Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.
- CVE-2020-18664 MEDIUM 5.4 UPGRADE Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn.
- CVE-2019-12461 MEDIUM 6.1 DOWNGRADE Web Port 1.19.1 allows XSS via the /log type parameter.
- CVE-2019-12460 MEDIUM 6.1 DOWNGRADE Web Port 1.19.1 allows XSS via the /access/setup type parameter.
FAQ
How do I fix webport vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webport being exploited right now?
None of the tracked webport CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webport CVE should I patch first?
CVE-2020-18667 currently ranks highest (62/100): SQL Injection vulnerability in WebPort <=1.19.1 via the new connection, parameter name in type-conn..