7.8

CVE-2007-2690

Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.

Data is provided by the National Vulnerability Database (NVD)
Iss ≫ Proventia A Series Xpu Version <= 22.10
Iss ≫ Proventia A Series Xpu Version20.11
Iss ≫ Proventia A Series Xpu Version22.1
Iss ≫ Proventia A Series Xpu Version22.2
Iss ≫ Proventia A Series Xpu Version22.3
Iss ≫ Proventia A Series Xpu Version22.4
Iss ≫ Proventia A Series Xpu Version22.5
Iss ≫ Proventia A Series Xpu Version22.6
Iss ≫ Proventia G Series Xpu Version <= 22.11
Iss ≫ Proventia G Series Xpu Version22.1
Iss ≫ Proventia G Series Xpu Version22.2
Iss ≫ Proventia G Series Xpu Version22.3
Iss ≫ Proventia G Series Xpu Version22.4
Iss ≫ Proventia G Series Xpu Version22.5
Iss ≫ Proventia G Series Xpu Version22.6
Iss ≫ Proventia G Series Xpu Version22.7
Iss ≫ Proventia G Series Xpu Version22.8
Iss ≫ Proventia G Series Xpu Version22.9
Iss ≫ Proventia G Series Xpu Version22.10
Iss ≫ Proventia M Series Xpu Version <= 1.9
Iss ≫ Proventia M Series Xpu Version1.1
Iss ≫ Proventia M Series Xpu Version1.2
Iss ≫ Proventia M Series Xpu Version1.3
Iss ≫ Proventia M Series Xpu Version1.4
Iss ≫ Proventia M Series Xpu Version1.5
Iss ≫ Proventia M Series Xpu Version1.6
Iss ≫ Proventia M Series Xpu Version1.7
Iss ≫ Proventia M Series Xpu Version1.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.24% 0.783
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C