PatchTheCVExoev vulnerabilities
Recent CVEs affecting xoev products. 3 tracked.
xoev has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-06-30. Highest priority: CVE-2017-10670 (score 57/100).
- CVE-2017-10670 CRITICAL 9.8 DOWNGRADE An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java)
- CVE-2017-10669 MEDIUM 6.5 DOWNGRADE Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transp
- CVE-2017-10668 MEDIUM 5.9 DOWNGRADE A Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transpor
FAQ
How do I fix xoev vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xoev being exploited right now?
None of the tracked xoev CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xoev CVE should I patch first?
CVE-2017-10670 currently ranks highest (57/100): An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java).