Vulnerabilities

TI-2002-02230 CVE-2002-2318 · GHSA-h76m-769p-5qpp

Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through…

LOW 23

Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and execut…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01452 Published 2007-10-26 No fix listed CWE-79

TI-2002-00264 CVE-2002-0275 · GHSA-8jxj-w5fr-rjvp

Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication…

LOW 27

Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted files via an extra / (slash) in the requested URL.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02404 Published 2004-09-01 No fix listed

TI-2002-00872 CVE-2002-0899 · GHSA-367v-x7f9-9fgg

Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access…

LOW 36

Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a .

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01766 Published 2002-08-31 No fix listed

TI-1999-00831 CVE-1999-0881 · GHSA-6g75-g2fr-4679

Falcon web server allows remote attackers to read arbitrary files via a ..

LOW 25

Falcon web server allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01309 Published 2000-01-18 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through…

Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication…

Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access…

Falcon web server allows remote attackers to read arbitrary files via a ..