Surfcontrol Superscout Web Filter — known CVE vulnerabilities

Every CVE whose affected-product data names Surfcontrol Superscout Web Filter, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2002-0705 — CVSS 7.5 (high): The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible…
• CVE-2002-0706 — CVSS 7.5 (high): UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which…
• CVE-2002-0709 — CVSS 7.5 (high): SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary…
• CVE-2002-0707 — CVSS 5.0 (medium): The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU consumption) via…
• CVE-2002-0708 — CVSS 5.0 (medium): Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary…
• CVE-2001-1465 — CVSS 4.6 (medium): SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass…