T. Hauck Jana Web Server — known CVE vulnerabilities

Every CVE whose affected-product data names T. Hauck Jana Web Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2002-1066 — CVSS 7.5 (high): Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a…
• CVE-2002-1061 — CVSS 7.5 (high): Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of…
• CVE-2002-1062 — CVSS 7.5 (high): Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code…
• CVE-2002-1065 — CVSS 7.5 (high): Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes…
• CVE-2002-1064 — CVSS 5.0 (medium): Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which…
• CVE-1999-1082 — CVSS 5.0 (medium): Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified…
• CVE-2002-1063 — CVSS 5.0 (medium): Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service (resource…
• CVE-1999-1083 — CVSS 5.0 (medium): Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack.
• CVE-2001-0557 — CVSS 5.0 (medium): T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' (dot dot) attack which is URL encoded…
• CVE-2001-0558 — CVSS 5.0 (medium): T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a…