Skip to content
Noroxi

surfcontrol records

12 published records for vendor surfcontrol.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      12 records
      • CVE-2002-0705
        31Monitor

        The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory

        HighCVSS 7.5No exploitEPSS 2%

        surfcontrol · superscout web filterOct 10, 2002

      • CVE-2002-0709
        30Monitor

        SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL

        HighCVSS 7.5Proof of conceptEPSS 1%

        surfcontrol · superscout web filterOct 10, 2002

      • CVE-2002-0706
        30Monitor

        UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows

        HighCVSS 7.5No exploitEPSS 1%

        surfcontrol · superscout web filterOct 10, 2002

      • CVE-2002-1530
        22Monitor

        The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords

        MediumCVSS 5.0Proof of conceptEPSS 6%

        surfcontrol · superscout email filterMar 31, 2003

      • CVE-2002-0708
        21Monitor

        Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary f

        MediumCVSS 5.0Proof of conceptEPSS 3%

        surfcontrol · superscout web filterOct 10, 2002

      • CVE-2002-2121
        21Monitor

        SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service (crash) via a long SMTP (1) HELO or

        MediumCVSS 5.0No exploitEPSS 3%

        surfcontrol · superscout email filterDec 31, 2002

      • CVE-2002-1531
        21Monitor

        The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (cr

        MediumCVSS 5.0No exploitEPSS 3%

        surfcontrol · superscout email filterMar 31, 2003

      • CVE-2002-1532
        21Monitor

        The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (re

        MediumCVSS 5.0No exploitEPSS 3%

        surfcontrol · superscout email filterMar 31, 2003

      • CVE-2002-0707
        21Monitor

        The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU consumption) via large

        MediumCVSS 5.0No exploitEPSS 2%

        surfcontrol · superscout web filterOct 10, 2002

      • CVE-2002-1529
        18Monitor

        Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Fi

        MediumCVSS 4.3Proof of conceptEPSS 4%

        surfcontrol · superscout email filterMar 31, 2003

      • CVE-2001-1465
        18Monitor

        SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filter

        MediumCVSS 4.6No exploitEPSS 0%

        surfcontrol · superscout web filterFeb 26, 2002

      • CVE-2000-0124
        8Monitor

        surfCONTROL SuperScout does not properly asign a category to web sites with a .

        LowCVSS 2.1No exploitEPSS 0%

        surfcontrol · superscoutFeb 3, 2000