PatchTheCVEwikidsystems vulnerabilities
Recent CVEs affecting wikidsystems products. 8 tracked.
wikidsystems has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2019-10-17. Highest priority: CVE-2019-16917 (score 56/100).
- CVE-2019-17120 MEDIUM 6.1 DOWNGRADE A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b
- CVE-2019-17119 HIGH 8.8 UPGRADE Multiple SQL injection vulnerabilities in Logs.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allow au
- CVE-2019-17118 HIGH 8.8 DOWNGRADE A CSRF issue in WiKID 2FA Enterprise Server through 4.2.0-b2053 allows a remote attacker to trick an authentic
- CVE-2019-17117 HIGH 8.8 DOWNGRADE A SQL injection vulnerability in processPref.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allows an
- CVE-2019-17116 MEDIUM 6.1 UPGRADE A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b
- CVE-2019-17115 MEDIUM 6.1 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow r
- CVE-2019-17114 MEDIUM 6.1 UPGRADE A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b
- CVE-2019-16917 HIGH 8.8 UPGRADE WiKID Enterprise 2FA (two factor authentication) Enterprise Server through 4.2.0-b2047 is vulnerable to SQL in
FAQ
How do I fix wikidsystems vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wikidsystems being exploited right now?
None of the tracked wikidsystems CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wikidsystems CVE should I patch first?
CVE-2019-16917 currently ranks highest (56/100): WiKID Enterprise 2FA (two factor authentication) Enterprise Server through 4.2.0-b2047 is vulnerable to SQL in.