TI-2009-04915 CVE-2009-20005 · GHSA-3q48-rvhc-r6w6
InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow
Priority HIGH 81
A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1.
InterSystems
Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
InterSystems records in CISA KEVNo InterSystems vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records
TI-2003-01233 CVE-2003-1333 · GHSA-34w9-p2mc-gqxq
Unspecified vulnerability in the Cache' Server Page (CSP) implementation in InterSystems…
Priority MEDIUM 47
Unspecified vulnerability in the Cache' Server Page (CSP) implementation in InterSystems Cache' 4.0.3 through 5.0.5 allows remote attackers to "gain complete control" of a server.
TI-2026-79512 CVE-2026-111594 · GHSA-qg7q-rhjp-mfxj
Cleartext transmission in InterSystems IRIS for Health exposes data
Priority MEDIUM 41
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.
TI-2003-00468 CVE-2003-0497 · GHSA-9g9j-vr2v-2964
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which…
Priority LOW 33
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.
TI-2003-00469 CVE-2003-0498 · GHSA-q2xh-gxfm-h723
Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which…
Priority LOW 32
Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scripts that are executed with root privileges.
TI-2018-12258 CVE-2018-17152 · GHSA-xg22-x8fq-6946
Intersystems Cache 2017.2.2.865.0 allows XXE.
Priority LOW 30
Intersystems Cache 2017.2.2.865.0 allows XXE.
TI-2018-12256 CVE-2018-17150 · GHSA-hp5g-9hrc-gc98
Intersystems Cache 2017.2.2.865.0 allows XSS.
Priority LOW 29
Intersystems Cache 2017.2.2.865.0 allows XSS.
TI-2018-12257 CVE-2018-17151 · GHSA-rmf8-3xvw-rmgj
Intersystems Cache 2017.2.2.865.0 has Incorrect Access Control.
Priority LOW 26
Intersystems Cache 2017.2.2.865.0 has Incorrect Access Control.
TI-2007-04287 CVE-2007-4427 · GHSA-q29j-3f7p-x46x
Unspecified vulnerability in the login page redirection logic in the Cache' Server Page…
Priority LOW 18
Unspecified vulnerability in the login page redirection logic in the Cache' Server Page (CSP) implementation in InterSystems Cache' 2007.1.0.369.0 and 2007.1.1.420.0 allows remote authenticated users to modify data on a…
TI-2007-00427 CVE-2007-0437 · GHSA-pvph-mwgf-m4j6
Multiple cross-site scripting (XSS) vulnerabilities in the sample Cache' Server Page…
Priority LOW 18
Multiple cross-site scripting (XSS) vulnerabilities in the sample Cache' Server Page (CSP) scripts in InterSystems Cache' allow remote attackers to inject arbitrary web script or HTML via (1) the TO parameter to loop.csp…
TI-2004-02554 CVE-2004-2684 · GHSA-f7mm-qr3m-2g22
Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows…
Priority LOW 11
Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows attackers to access certain files on a server, including (1) cache.key and (2) cache.dat, related to .csp files under (a) Dev\studio\te…
TI-2004-02553 CVE-2004-2683 · GHSA-v78w-74x8-ppvv
Unspecified vulnerability in the %XML.Utils.SchemaServer class in InterSystems Cache' 5.0…
Priority LOW 11
Unspecified vulnerability in the %XML.Utils.SchemaServer class in InterSystems Cache' 5.0 allows attackers to access arbitrary files on a server.