📦

superscout_email_filter

Vendor: surfcontrol

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 2 Code Available
Total RCEs 0 Remote Access
Total CVEs 10 Total Indexed
Avg. EPSS 3.44% Exploit Prob.
Latest CVE CVE-2002-1529 Mar 31

Security Vulnerability Index

Page 1 / 1
4.3 CVSS
CVE-2002-1529
Exploit Found

Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.

EPSS: 3.58%
5.0 CVSS
CVE-2002-1530
Exploit Found

The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form.

EPSS: 5.89%
5.0 CVSS
CVE-2002-1531

The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter.

EPSS: 2.57%
5.0 CVSS
CVE-2002-1532

The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion) via a GET request without the terminating /r/n/r/n (CRLF) sequence, which causes the interface to wait for the sequence and blocks other users from accessing it.

EPSS: 2.57%
5.0 CVSS
CVE-2002-2121

SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service (crash) via a long SMTP (1) HELO or (2) RCPT TO command, possibly due to a buffer overflow.

EPSS: 2.57%