PatchTheCVEwebreflex vulnerabilities and fixes
Recent CVEs affecting webreflex, with upgrade or downgrade steps. 2 tracked.
webreflex has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2002-12-31. Highest priority: CVE-2001-0298 (score 46/100).
- CVE-2002-2229 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in Sapio Design Ltd
- CVE-2001-0298 MEDIUM 5.0 DOWNGRADE Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly exe
FAQ
How do I fix webreflex vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webreflex being exploited right now?
None of the tracked webreflex CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webreflex CVE should I patch first?
CVE-2001-0298 currently ranks highest (46/100): Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly exe.