cve-2024-25144
Vulnerability from cvelistv5
Published
2024-02-08 03:25
Modified
2024-10-02 15:31
Severity ?
4.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L
Summary
The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 6, 7.2 before fix pack 19, and older unsupported versions does not check the URL of the IFrame, which allows remote authenticated users to cause a denial-of-service (DoS) via a self referencing IFrame.
References
security@liferay.comhttps://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25144Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25144Vendor Advisory
Impacted products
Vendor Product Version
Liferay DXP Version: 7.4.13
Version: 7.3.10
Version: 7.2.10
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-25144",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-08T20:11:12.629935Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-05T17:20:46.824Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T23:36:21.643Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25144"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Portal",
          "vendor": "Liferay",
          "versions": [
            {
              "lessThanOrEqual": "7.4.3.26",
              "status": "affected",
              "version": "7.2.0",
              "versionType": "maven"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "DXP",
          "vendor": "Liferay",
          "versions": [
            {
              "lessThanOrEqual": "7.4.13.u26",
              "status": "affected",
              "version": "7.4.13",
              "versionType": "maven"
            },
            {
              "lessThanOrEqual": "7.3.10.u5",
              "status": "affected",
              "version": "7.3.10",
              "versionType": "maven"
            },
            {
              "lessThanOrEqual": "7.2.10-dxp-18",
              "status": "affected",
              "version": "7.2.10",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 6, 7.2 before fix pack 19, and older unsupported versions does not check the URL of the IFrame, which allows remote authenticated users to cause a denial-of-service (DoS) via a self referencing IFrame."
            }
          ],
          "value": "The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 6, 7.2 before fix pack 19, and older unsupported versions does not check the URL of the IFrame, which allows remote authenticated users to cause a denial-of-service (DoS) via a self referencing IFrame."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-835",
              "description": "CWE-835 Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-02T15:31:02.494Z",
        "orgId": "8b54e794-c6f0-462e-9faa-c1001a673ac3",
        "shortName": "Liferay"
      },
      "references": [
        {
          "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25144"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8b54e794-c6f0-462e-9faa-c1001a673ac3",
    "assignerShortName": "Liferay",
    "cveId": "CVE-2024-25144",
    "datePublished": "2024-02-08T03:25:31.037Z",
    "dateReserved": "2024-02-06T10:32:42.566Z",
    "dateUpdated": "2024-10-02T15:31:02.494Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-25144\",\"sourceIdentifier\":\"security@liferay.com\",\"published\":\"2024-02-08T04:15:07.763\",\"lastModified\":\"2024-11-21T09:00:20.550\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 6, 7.2 before fix pack 19, and older unsupported versions does not check the URL of the IFrame, which allows remote authenticated users to cause a denial-of-service (DoS) via a self referencing IFrame.\"},{\"lang\":\"es\",\"value\":\"El widget IFrame en Liferay Portal 7.2.0 a 7.4.3.26 y versiones anteriores no compatibles, y Liferay DXP 7.4 antes de la actualizaci\u00f3n 27, 7.3 antes de la actualizaci\u00f3n 6, 7.2 antes del fixpack 19 y versiones anteriores no compatibles no comprueba la URL del IFrame , que permite a los usuarios autenticados remotamente provocar una denegaci\u00f3n de servicio (DoS) a trav\u00e9s de un IFrame de autorreferencia.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security@liferay.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L\",\"baseScore\":4.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.3,\"impactScore\":1.4},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"security@liferay.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-835\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-834\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"8CAAE1B7-982E-4D50-9651-DEEE6CD74EED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_1:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFCF99EC-3384-418D-A419-B9DB607BE371\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_10:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7CAAF53-AA8E-48CB-9398-35461BE590C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_11:*:*:*:*:*:*\",\"matchCriteriaId\":\"6FB8482E-644B-4DA5-808B-8DBEAB6D8D09\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_12:*:*:*:*:*:*\",\"matchCriteriaId\":\"95EFE8B5-EE95-4186-AC89-E9AFD8649D01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_13:*:*:*:*:*:*\",\"matchCriteriaId\":\"90A6E0AF-0B8A-462D-95EF-2239EEE4A50D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_14:*:*:*:*:*:*\",\"matchCriteriaId\":\"48BBAE90-F668-49BF-89AF-2C9547B76836\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_15:*:*:*:*:*:*\",\"matchCriteriaId\":\"74FAF597-EAAD-4BB5-AB99-8129476A7E89\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_16:*:*:*:*:*:*\",\"matchCriteriaId\":\"20F078A3-A3EE-4CCA-816D-3C053E7D7FE3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_17:*:*:*:*:*:*\",\"matchCriteriaId\":\"C33EBD80-91DD-401C-9337-171C07B5D489\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_18:*:*:*:*:*:*\",\"matchCriteriaId\":\"0058B9A5-7864-4356-ADBA-C9AF1BB74836\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_2:*:*:*:*:*:*\",\"matchCriteriaId\":\"31E05134-A0C5-4937-A228-7D0884276B67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_3:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F06C4AD-FD20-4345-8386-0895312F0A00\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_4:*:*:*:*:*:*\",\"matchCriteriaId\":\"98CC25E2-EC3D-43A2-8D03-06F0E804EA63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_5:*:*:*:*:*:*\",\"matchCriteriaId\":\"30933C36-C710-488F-9601-EE1BB749C58A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_6:*:*:*:*:*:*\",\"matchCriteriaId\":\"41E94372-A1AE-48B1-82DC-08B7B616473F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_7:*:*:*:*:*:*\",\"matchCriteriaId\":\"51FBC8E0-34F8-475C-A1A8-571791CA05F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_8:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E73EAEA-FA88-46B9-B9D5-A41603957AD7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.2:fix_pack_9:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF9BC654-4E3F-4B40-A6E5-79A818A51BED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.3:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"21C55D41-DB66-494D-BEEB-BDAC7CB4B31B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.3:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D75A0FF-BAEA-471A-87B2-8EC2A9F0A6B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.3:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D86CDCC0-9655-477B-83FA-ADDBB5AF43A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.3:sp3:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CF5B84B-1719-4581-8474-C55CEFFD8305\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.3:update_1:*:*:*:*:*:*\",\"matchCriteriaId\":\"D60CDAA3-6029-4904-9D08-BB221BCFD7C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.3:update_2:*:*:*:*:*:*\",\"matchCriteriaId\":\"B66F47E9-3D82-497E-BD84-E47A65FAF8C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.3:update_3:*:*:*:*:*:*\",\"matchCriteriaId\":\"A0BA4856-59DF-427C-959F-3B836314F5D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.3:update_4:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3A5ADE1-4743-4A78-9FCC-CEB857012A5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.3:update_5:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B420A18-5C8B-470F-9189-C84F8DAA74D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"ADB5F13C-EE1E-4448-8FCF-5966F6874440\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_1:*:*:*:*:*:*\",\"matchCriteriaId\":\"46AF397F-A95C-4FAD-A6EA-CB623B7A262A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_10:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B8C3B3F-1BBB-47A5-A789-B207B6346FFF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_11:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD5D1171-954A-4E75-813D-E8392CFE4029\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_12:*:*:*:*:*:*\",\"matchCriteriaId\":\"F148098A-D867-4C8B-9632-6B7F24D50C30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_13:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A112ED2-27C2-45E3-8FA0-6043F7D3BEED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_14:*:*:*:*:*:*\",\"matchCriteriaId\":\"0744AC04-9663-4DA1-9657-EC5BF0C68499\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_15:*:*:*:*:*:*\",\"matchCriteriaId\":\"5703FE2B-011A-4A40-AB67-B989438F2183\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_16:*:*:*:*:*:*\",\"matchCriteriaId\":\"41A54448-B1AB-4E92-8523-5D4A46A83533\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_17:*:*:*:*:*:*\",\"matchCriteriaId\":\"A96A2A4A-3EB3-4074-A846-EC6EECC04B43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_18:*:*:*:*:*:*\",\"matchCriteriaId\":\"56DAE678-10B9-419D-9F5D-96E3AC3A6E4A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_19:*:*:*:*:*:*\",\"matchCriteriaId\":\"064F4C28-B1F5-44C2-91AA-A09FD56EC0B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_2:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2C2351E-BDEE-4A79-A00C-6520B54996EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_20:*:*:*:*:*:*\",\"matchCriteriaId\":\"814D0CE3-B89F-423C-B1E3-47BD0A474491\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_21:*:*:*:*:*:*\",\"matchCriteriaId\":\"58DB7C5A-B4E3-410A-B491-3F322B340BDF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_22:*:*:*:*:*:*\",\"matchCriteriaId\":\"86B581B6-02B0-40B9-BB5C-E28FC51042DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_23:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7EFBC14-6785-4435-BA96-D77A857BC1C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_24:*:*:*:*:*:*\",\"matchCriteriaId\":\"585635F8-53DC-4F64-BF6B-C6F72A5F4D29\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_25:*:*:*:*:*:*\",\"matchCriteriaId\":\"355DD7FC-E9C7-43D6-8313-0474AB314F18\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_26:*:*:*:*:*:*\",\"matchCriteriaId\":\"B0FDE8B1-444A-4FEB-AC97-4B29C914EB8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_3:*:*:*:*:*:*\",\"matchCriteriaId\":\"25F5C3E9-CBB0-4114-91A4-41F0E666026A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_4:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E2B5687-B311-460E-A562-D754AF271F8E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_5:*:*:*:*:*:*\",\"matchCriteriaId\":\"B49D0CB9-8ED7-46AB-9BA5-7235A2CD9117\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_6:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF169364-096C-4294-B89F-C07AF1DCC9C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_7:*:*:*:*:*:*\",\"matchCriteriaId\":\"30CB2C54-1A20-4226-ACC6-AC8131899AE2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_8:*:*:*:*:*:*\",\"matchCriteriaId\":\"65693260-5B0F-47AA-BF08-D2979997A40A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:dxp:7.4:update_9:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9116909-04C3-4040-B945-4A6225425520\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.2.0\",\"versionEndExcluding\":\"7.4.3.26\",\"matchCriteriaId\":\"71EF9A3C-C47A-4C68-B7FA-39AA7F20B8BD\"}]}]}],\"references\":[{\"url\":\"https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25144\",\"source\":\"security@liferay.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25144\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.