Orange SoftwareCVEs & Vulnerabilities
2 CVEs affecting Orange Software products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
orange web server 2
CVE-2002-0680MEDIUMpoc
Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228.
23 Jul 2002
5.0
CVSS
CVE-2001-0647MEDIUMpoc
Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version.
6 Aug 2001
5.0
CVSS
← PrevPage 1 / 1Next →