Savant Savant Webserver — known CVE vulnerabilities

Every CVE whose affected-product data names Savant Savant Webserver, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2002-2145 — CVSS 7.5 (high): Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex…
• CVE-2002-2146 — CVSS 7.5 (high): cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request.
• CVE-2005-0338 — CVSS 7.5 (high): Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.
• CVE-2002-1828 — CVSS 5.0 (medium): Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negative Content-Length…
• CVE-2005-2859 — CVSS 4.6 (medium): Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local users to gain privileges.