PatchTheCVEweb filter vulnerabilities and fixes
Recent CVEs affecting web filter, with upgrade or downgrade steps. 7 tracked.
Also searched as: webfilter.
web filter has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2015-05-25. Highest priority: CVE-2002-0709 (score 48/100).
- CVE-2015-0962 MEDIUM 4.3 DOWNGRADE Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certific
- CVE-2015-0961 MEDIUM 4.3 UPGRADE Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from
- CVE-2002-0709 HIGH 7.5 DOWNGRADE DOWNGRADE SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote atta
- CVE-2002-0708 MEDIUM 5.0 DOWNGRADE DOWNGRADE Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote
- CVE-2002-0707 MEDIUM 5.0 DOWNGRADE DOWNGRADE The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of servi
- CVE-2002-0706 HIGH 7.5 DOWNGRADE DOWNGRADE UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for adminis
- CVE-2002-0705 HIGH 7.5 DOWNGRADE DOWNGRADE The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file
FAQ
How do I fix web filter vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is web filter being exploited right now?
None of the tracked web filter CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which web filter CVE should I patch first?
CVE-2002-0709 currently ranks highest (48/100): SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote atta.