PatchTheCVEsurfcontrol vulnerabilities
Recent CVEs affecting surfcontrol products. 11 tracked.
surfcontrol has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2003-03-31. Highest priority: CVE-2002-0709 (score 48/100).
- CVE-2002-2121 MEDIUM 5.0 DOWNGRADE SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service (crash
- CVE-2002-1532 MEDIUM 5.0 DOWNGRADE The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to
- CVE-2002-1531 MEDIUM 5.0 DOWNGRADE The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to
- CVE-2002-1530 MEDIUM 5.0 DOWNGRADE The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain use
- CVE-2002-1529 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for S
- CVE-2002-0709 HIGH 7.5 DOWNGRADE DOWNGRADE SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote atta
- CVE-2002-0708 MEDIUM 5.0 DOWNGRADE DOWNGRADE Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote
- CVE-2002-0707 MEDIUM 5.0 DOWNGRADE DOWNGRADE The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of servi
- CVE-2002-0706 HIGH 7.5 DOWNGRADE DOWNGRADE UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for adminis
- CVE-2002-0705 HIGH 7.5 DOWNGRADE DOWNGRADE The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file
- CVE-2001-1465 MEDIUM 4.6 MITIGATE SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allow
FAQ
How do I fix surfcontrol vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is surfcontrol being exploited right now?
None of the tracked surfcontrol CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which surfcontrol CVE should I patch first?
CVE-2002-0709 currently ranks highest (48/100): SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote atta.