PatchTheCVEjana web server vulnerabilities and fixes
Recent CVEs affecting jana web server, with upgrade or downgrade steps. 10 tracked.
Also searched as: janawebserver.
jana web server has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2002-10-04. Highest priority: CVE-2002-1066 (score 49/100).
- CVE-2002-1066 HIGH 7.5 DOWNGRADE Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly e
- CVE-2002-1065 HIGH 7.5 DOWNGRADE Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessfu
- CVE-2002-1064 MEDIUM 5.0 DOWNGRADE Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and
- CVE-2002-1063 MEDIUM 5.0 DOWNGRADE Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial o
- CVE-2002-1062 HIGH 7.5 DOWNGRADE Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers
- CVE-2002-1061 HIGH 7.5 DOWNGRADE Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote a
- CVE-2001-0558 MEDIUM 5.0 DOWNGRADE T
- CVE-2001-0557 MEDIUM 5.0 UPGRADE T
- CVE-1999-1083 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary fil
- CVE-1999-1082 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary fil
FAQ
How do I fix jana web server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jana web server being exploited right now?
None of the tracked jana web server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jana web server CVE should I patch first?
CVE-2002-1066 currently ranks highest (49/100): Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly e.