Coffeecup Software

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Coffeecup Software records in CISA KEV

No Coffeecup Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Coffeecup Direct Ftp 1 record LOW Coffeecup Free Ftp 1 record LOW Coffeecup Password Wizard 1 record LOW

Records

2 records

TI-2003-01294 CVE-2003-1394 · GHSA-9xh2-cv46-rpfc

CoffeeCup Software Password Wizard 4.0 stores sensitive information such as usernames and…

LOW 26

CoffeeCup Software Password Wizard 4.0 stores sensitive information such as usernames and passwords in a .apw file under the web document root with insufficient access control, which allows remote attackers to obtain tha…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01324 Published 2007-10-19 No fix listed CWE-255

TI-2001-00103 CVE-2001-0103 · GHSA-j27p-f9p3-c4mr

CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the…

LOW 21

CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00212 Published 2001-02-02 No fix listed CWE-310

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0