Key Focus

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Key Focus records in CISA KEV

No Key Focus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kf Web Server 4 records LOW

Records

4 records

TI-2002-01004 CVE-2002-1032 · GHSA-7c69-46mw-x44h

Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to…

LOW 37

Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02345 Published 2002-08-31 No fix listed

TI-2002-01003 CVE-2002-1031 · GHSA-8rc3-4pw7-pqp3

KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read…

LOW 34

KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08039 Published 2003-04-02 No fix listed

TI-2002-02315 CVE-2002-2403 · GHSA-g98v-rw9m-98w8

Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to…

LOW 28

Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02665 Published 2007-11-01 No fix listed CWE-22

TI-2007-03290 CVE-2007-3396 · GHSA-w6pf-wcmg-gfh2

Cross-site scripting (XSS) vulnerability in index.wkf in KeyFocus (KF) web server 3.1.0…

LOW 25

Cross-site scripting (XSS) vulnerability in index.wkf in KeyFocus (KF) web server 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the opsubmenu parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02449 Published 2007-06-26 No fix listed

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0