imatix records
7 published records for vendor imatix.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 14.3%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-134 Use of Externally-Controlled Format String2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
52Plan | CVE-2007-5067Weaponized | Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since heimatix · xitami · CWE-119 | High7.5 | — | 73.2% | Sep 24, 2007 |
42Plan | CVE-2008-6519Proof of concept | Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial imatix · xitami · CWE-134 | Critical10.0 | — | 5.9% | Mar 25, 2009 |
41Plan | CVE-2008-6520No exploit | Multiple format string vulnerabilities in the SSI filter in Xitami Web Server 2.5c2, and possibly other versions, allow remote attackers to imatix · xitami · CWE-134 | Critical10.0 | — | 4.8% | Mar 25, 2009 |
21Monitor | CVE-2002-1942No exploit | Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been broken or closed early, which allows remote aimatix · xitami | Medium5.0 | — | 1.6% | Dec 31, 2002 |
20Monitor | CVE-2000-1225No exploit | Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configuratimatix · xitami | Medium5.0 | — | 1.2% | Dec 31, 2000 |
20Monitor | CVE-2001-0391No exploit | Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.imatix · xitami | Medium5.0 | — | 1.2% | Jul 2, 2001 |
18Monitor | CVE-2002-1965Proof of concept | Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web scriimatix · xitami | Medium4.3 | — | 1.7% | Dec 31, 2002 |
- CVE-2007-506752Plan
Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since he
HighCVSS 7.5WeaponizedEPSS 73%imatix · xitamiSep 24, 2007
- CVE-2008-651942Plan
Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial
CriticalCVSS 10.0Proof of conceptEPSS 5%imatix · xitamiMar 25, 2009
- CVE-2008-652041Plan
Multiple format string vulnerabilities in the SSI filter in Xitami Web Server 2.5c2, and possibly other versions, allow remote attackers to
CriticalCVSS 10.0No exploitEPSS 4%imatix · xitamiMar 25, 2009
- CVE-2002-194221Monitor
Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been broken or closed early, which allows remote a
MediumCVSS 5.0No exploitEPSS 1%imatix · xitamiDec 31, 2002
- CVE-2000-122520Monitor
Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configurat
MediumCVSS 5.0No exploitEPSS 1%imatix · xitamiDec 31, 2000
- CVE-2001-039120Monitor
Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.
MediumCVSS 5.0No exploitEPSS 1%imatix · xitamiJul 2, 2001
- CVE-2002-196518Monitor
Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web scri
MediumCVSS 4.3Proof of conceptEPSS 1%imatix · xitamiDec 31, 2002