zerof vulnerabilities

Recent CVEs affecting zerof products. 4 tracked.

zerof has 4 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-02-18. Highest priority: CVE-2022-25322 (score 68/100).

• CVE-2022-25323 MEDIUM 6.1 DOWNGRADE ZEROF Web Server 2.0 allows /admin.back XSS.
• CVE-2022-25322 CRITICAL 9.8 DOWNGRADE ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.
• CVE-2021-30176 CRITICAL 9.8 DOWNGRADE The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to t
• CVE-2021-30175 CRITICAL 9.8 DOWNGRADE ZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the login page.

FAQ

How do I fix zerof vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is zerof being exploited right now?

None of the tracked zerof CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which zerof CVE should I patch first?

CVE-2022-25322 currently ranks highest (68/100): ZEROF Web Server 2.0 allows /HandleEvent SQL Injection..

Products

• expert
• web server

RSS feed for zerof · ← Back to latest CVEs