Skip to content

Affected versions

When a story concerns a vulnerability, the affected-versions information states exactly which releases are exposed — and under what conditions.

  1. The version range — for example “17.5.0 before Hotfix 9”. Your presence inside the range means possible exposure only.
  2. The exposure condition — many flaws require a feature to be enabled, a configuration to be present, or privileges to be held. These conditions appear with the story; they are part of the facts, not fine print.
  3. Fixed versions — the releases where the flaw is corrected.

If a source doesn’t state the affected versions, the story says unknown — it never guesses a range. Absence of a listed version is not evidence of safety; it means the sources haven’t established it.