Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-3008
HistoryJun 04, 2007 - 5:30 p.m.

CVE-2007-3008

2007-06-0417:30:00
CWE-200
CWE-79
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.7%

JSON

Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing (XST) attacks, a related issue to CVE-2004-2320 and CVE-2005-3398.

Affected configurations

NVD
Node
mbedthis_softwarembedthis_appweb_http_serverMatch2.0.0
OR
mbedthis_softwarembedthis_appweb_http_serverMatch2.0.1
OR
mbedthis_softwarembedthis_appweb_http_serverMatch2.0.2
OR
mbedthis_softwarembedthis_appweb_http_serverMatch2.0.3
OR
mbedthis_softwarembedthis_appweb_http_serverMatch2.0.4
OR
mbedthis_softwarembedthis_appweb_http_serverMatch2.0.5
OR
mbedthis_softwarembedthis_appweb_http_serverMatch2.1.0
OR
mbedthis_softwarembedthis_appweb_http_serverMatch2.1.1
OR
mbedthis_softwarembedthis_appweb_http_serverMatch2.2.0
OR
mbedthis_softwarembedthis_appweb_http_serverMatch2.2.1

Related

cve 5
redhatcve 2
prion 3
cvelist 5
nessus 7
f5 2
openvas 9
nvd 4
pentestpartners 1
cve
cve
CVE-2007-3008
2007-06-04 17:30:00
CVE-2004-2320
2005-08-16 04:00:00
CVE-2005-3398
2005-11-01 12:47:00
redhatcve
redhatcve
CVE-2007-3008
2015-10-30 09:28:33
CVE-2004-2320
2015-10-30 09:39:58
prion
prion
Cross site scripting
2007-06-04 17:30:00
Design/Logic Flaw
2010-01-25 19:30:00
Design/Logic Flaw
2010-01-25 19:30:00
cvelist
cvelist
CVE-2007-3008
2007-06-04 17:00:00
CVE-2005-3398
2005-11-01 11:00:00
CVE-2004-2320
2005-08-16 04:00:00
nessus
nessus
HTTP Reverse Proxy Detection (Deprecated)
2002-07-02 00:00:00
WebLogic < 8.1 SP3 Multiple Vulnerabilities
2004-09-14 00:00:00
Solaris 9 (x86) : 116808-02
2004-07-12 00:00:00
f5
f5
SOL15904 - Multiple third-party application-server vulnerabilities
2014-12-11 00:00:00
K15904 : Multiple third-party application-server vulnerabilities
2014-12-11 00:00:00
openvas
openvas
Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116808-02
2009-06-03 00:00:00
Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116807-02
2009-06-03 00:00:00
Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116807-02
2009-06-03 00:00:00
nvd
nvd
CVE-2005-3398
2005-11-01 12:47:00
CVE-2004-2320
2004-12-31 05:00:00
CVE-2008-7253
2010-01-25 19:30:00
pentestpartners
pentestpartners
Vulnerabilities that aren’t. Cross Site Tracing / XST
2022-01-25 06:08:46

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.7%

JSON
Related for NVD:CVE-2007-3008
cve5redhatcve2prion3cvelist5nessus7f52openvas9nvd4pentestpartners1