Vendors / Savant Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now Savant records in CISA KEV No Savant vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.07653 · Published 2005-11-16 · No fix listed
Priority MEDIUM 41
Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05437 · Published 2005-02-10 · No fix listed
Priority LOW 38
cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02635 · Published 2005-11-16 · No fix listed
Priority LOW 33
Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negative Content-Length value.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06919 · Published 2005-06-28 · No fix listed
Priority LOW 21
Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local users to gain privileges.
CVSS 2.0 MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00395 · Published 2005-09-08 · No fix listed
Open these records in search → All records by CVSS severity
0 4 2 0 0
THREATIST.IORead the docs