PatchTheCVEfalcon web server vulnerabilities and fixes
Recent CVEs affecting falcon web server, with upgrade or downgrade steps. 5 tracked.
Also searched as: falconwebserver.
falcon web server has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2002-12-31. Highest priority: CVE-2002-0899 (score 51/100).
- CVE-2002-2318 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote atta
- CVE-2002-0899 HIGH 7.5 DOWNGRADE Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected f
- CVE-2002-0275 MEDIUM 5.0 DOWNGRADE Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted
- CVE-1999-0882 MEDIUM 5.0 DOWNGRADE Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.
- CVE-1999-0881 MEDIUM 5.0 DOWNGRADE Falcon web server allows remote attackers to read arbitrary files via a .
FAQ
How do I fix falcon web server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is falcon web server being exploited right now?
None of the tracked falcon web server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which falcon web server CVE should I patch first?
CVE-2002-0899 currently ranks highest (51/100): Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected f.