Vulnerabilities

TI-2001-01111 CVE-2001-1157 · GHSA-jfq5-58cv-4455

Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from…

LOW 38

Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow remote attackers to bypass the filtering via (1) an extra leading < and one or more characters before…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02443 Published 2002-03-15 No fix listed

TI-2001-01106 CVE-2001-1152 · GHSA-jpjf-jh54-v8hv

Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote…

LOW 38

Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02443 Published 2002-03-15 No fix listed

TI-2001-00452 CVE-2001-0460 · GHSA-g844-hmxx-5gwm

Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote…

LOW 31

Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of service (memory exhaustion) via an extremely large HTTP Referrer: header.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05268 Published 2001-05-24 No fix listed

Vulnerabilities

Filters

Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from…

Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote…

Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote…