Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

intersystems cache 5 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2003-1333
Unspecified vulnerability in the Cache' Server Page (CSP) implementation in InterSystems Cache' 4.0.3 up to and including 5.0.5 allows remote malicious users to "gain complete control" of a server.
Intersystems Cache Database 4.1.16Intersystems Cache Database 5.0.12Intersystems Cache Database 5.0.5Intersystems Cache Database 5.0.17Intersystems Cache Database 5.0.19Intersystems Cache Database 5.0.21Intersystems Cache Database 5.0.3Intersystems Cache Database 4.0.4Intersystems Cache Database 4.1.15Intersystems Cache Database 5Intersystems Cache Database 4.0.3
2.1
CVSSv2
CVE-2004-2683
Unspecified vulnerability in the %XML.Utils.SchemaServer class in InterSystems Cache' 5.0 allows malicious users to access arbitrary files on a server.
Intersystems Cache 5
7.2
CVSSv2
CVE-2003-0497
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.
Intersystems Cache Database 5
7.2
CVSSv2
CVE-2003-0498
Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scripts that are executed with root privileges.
Intersystems Cache Database 5
2.1
CVSSv2
CVE-2004-2684
Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows malicious users to access certain files on a server, including (1) cache.key and (2) cache.dat, related to .csp files under (a) Dev\studio\templates and (b) Devuser\studio\templates.
Intersystems Cache Database 5
3.5
CVSSv2
CVE-2007-0437
Multiple cross-site scripting (XSS) vulnerabilities in the sample Cache' Server Page (CSP) scripts in InterSystems Cache' allow remote malicious users to inject arbitrary web script or HTML via (1) the TO parameter to loop.csp, (2) the VALUE parameter to cookie.csp, and...
Intersystems Cache Database
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
XXECVE-2024-34490SQL injectionCVE-2024-34488CVE-2024-4507CVE-2023-7028CVE-2024-23187TCPCVE-2024-4439
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook