PatchTheCVEsoft3304 vulnerabilities
Recent CVEs affecting soft3304 products. 9 tracked.
soft3304 has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2006-08-17. Highest priority: CVE-2006-4200 (score 45/100).
- CVE-2006-4200 HIGH 7.5 UPGRADE Unspecified vulnerability in 04WebServer 1.83 and earlier allows remote attackers to bypass user authenticatio
- CVE-2006-4199 MEDIUM 6.8 UPGRADE Cross-site scripting (XSS) vulnerability in Soft3304 04WebServer 1.83 and earlier allows remote attackers to i
- CVE-2005-1416 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web
- CVE-2004-2662 MEDIUM 5.0 DOWNGRADE Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource consumption or
- CVE-2004-2661 MEDIUM 5.0 DOWNGRADE Soft3304 04WebServer before 1.41 does not properly check file names, which allows remote attackers to obtain s
- CVE-2004-1514 MEDIUM 5.0 DOWNGRADE 04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP r
- CVE-2004-1513 MEDIUM 5.0 DOWNGRADE 04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attack
- CVE-2004-1512 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers
- CVE-2002-2216 MEDIUM 5.0 DOWNGRADE Soft3304 04WebServer before 1.20 does not properly process URL strings, which allows remote attackers to obtai
FAQ
How do I fix soft3304 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is soft3304 being exploited right now?
None of the tracked soft3304 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which soft3304 CVE should I patch first?
CVE-2006-4200 currently ranks highest (45/100): Unspecified vulnerability in 04WebServer 1.83 and earlier allows remote attackers to bypass user authenticatio.