PatchTheCVEcaucho technology vulnerabilities
Recent CVEs affecting caucho technology products. 15 tracked.
caucho technology has 15 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2007-05-16. Highest priority: CVE-2007-2439 (score 54/100).
- CVE-2007-2441 MEDIUM 5.0 UPGRADE Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obta
- CVE-2007-2440 MEDIUM 5.0 UPGRADE Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Wi
- CVE-2007-2439 HIGH 9.4 UPGRADE Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to caus
- CVE-2006-2438 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc) for Caucho
- CVE-2006-2437 MEDIUM 5.0 DOWNGRADE The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote
- CVE-2006-1953 HIGH 7.8 DOWNGRADE Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to rea
- CVE-2004-0280 MEDIUM 5.0 DOWNGRADE Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file t
- CVE-2003-1513 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through
- CVE-2002-2090 MEDIUM 5.0 DOWNGRADE Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via request
- CVE-2002-1990 MEDIUM 5.0 DOWNGRADE Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for th
- CVE-2002-1989 MEDIUM 5.0 DOWNGRADE Resin 2.1.1 allows remote attackers to cause a denial of service (thread and connection consumption) via multi
- CVE-2002-1988 MEDIUM 5.0 DOWNGRADE Resin 2.1.1 allows remote attackers to cause a denial of service (memory consumption and hang) via a URL with
- CVE-2002-1987 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to read arbitrary
- CVE-2001-0828 MEDIUM 5.1 UPGRADE A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to e
- CVE-2001-0399 MEDIUM 5.0 DOWNGRADE Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .
FAQ
How do I fix caucho technology vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is caucho technology being exploited right now?
None of the tracked caucho technology CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which caucho technology CVE should I patch first?
CVE-2007-2439 currently ranks highest (54/100): Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to caus.