Redhat Interchange vulnerabilities

3 known vulnerabilities affecting redhat/interchange.

Total CVEs

3

CISA KEV

0

Public exploits

2

Exploited in wild

0

Severity breakdown

MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2020-12685MEDIUMCVSS 6.1≥ 4.7.0, < 5.12.02020-05-15

CVE-2020-12685 [MEDIUM] CWE-79 CVE-2020-12685: XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentials or data via browser JavaScript.

CVE-2003-1138MEDIUMCVSS 5.0PoCv2.0.40_21.52003-10-27

CVE-2003-1138 [MEDIUM] CVE-2003-1138: The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attacke The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash (//).

CVE-2002-0874MEDIUMCVSS 5.0PoCv4.8.1v4.8.2+3 more2002-09-05

CVE-2002-0874 [MEDIUM] CVE-2002-0874: Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows rem Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files.