Trustwave Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined	10
Firewall Software	1

Produkt

Trustwave ModSecurity	8
Trustwave WebDefend	2
Trustwave Secure Web Gateway	1

Przeciwdziałanie

Official Fix	9
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	1

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	6
Unproven	0
Not Defined	5

Wektor dostępu

Not Defined	0
Physical	0
Local	0
Adjacent	2
Network	9

Uwierzytelnianie

Not Defined	0
High	0
Low	2
None	9

Interakcja z użytkownikiem

Not Defined	0
Required	0
None	11

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	6
≤7	2
≤8	2
≤9	0
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	5
≤7	3
≤8	0
≤9	1
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	5
≤7	1
≤8	2
≤9	0
≤10	1

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	3
≤9	0
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	3
<2k	1
<5k	7
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	11
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (3): ModSecurity (8), Secure Web Gateway (1), WebDefend (2)

Opublikowano	Base	Temp	Słaby punkt	Prod	Wyk	Prz	EPSS	CTI	CVE
2023-07-27	5.5	5.4	Trustwave ModSecurity denial of service	Nieznany	Not Defined	Official Fix	0.00046	0.00	CVE-2023-38285
2023-04-28	5.5	5.4	Trustwave ModSecurity Configuration Transaction denial of service	Nieznany	Not Defined	Official Fix	0.00046	0.00	CVE-2023-28882
2020-01-21	6.4	6.4	Trustwave ModSecurity transaction.cc addRequestHeader denial of service	Nieznany	Not Defined	Not Defined	0.00360	0.04	CVE-2019-19886
2017-12-31	9.8	9.0	Trustwave Secure Web Gateway SSH Key sendKey Remote Code Execution	Firewall Software	Proof-of-Concept	Workaround	0.10516	0.00	CVE-2017-18001
2014-03-31	6.5	5.9	Trustwave ModSecurity Chunk Extension modsecurity.c modsecurity_tx_init privilege escalation	Nieznany	Proof-of-Concept	Official Fix	0.00818	0.00	CVE-2013-5705
2014-03-31	5.3	4.6	Trustwave ModSecurity Chunked HTTP Transfer modsecurity.c modsecurity_tx_init privilege escalation	Nieznany	Proof-of-Concept	Official Fix	0.46729	0.00	CVE-2013-5704
2013-05-10	7.5	6.7	Trustwave ModSecurity denial of service	Nieznany	Proof-of-Concept	Official Fix	0.01832	0.00	CVE-2013-2765
2013-03-22	5.3	4.8	Trustwave ModSecurity XML Parser privilege escalation	Nieznany	Proof-of-Concept	Official Fix	0.00894	0.05	CVE-2013-1915
2012-10-15	7.3	6.6	Trustwave ModSecurity Multipart Request Parser privilege escalation	Nieznany	Proof-of-Concept	Official Fix	0.01269	0.00	CVE-2012-4528
2011-05-05	5.3	5.1	Trustwave WebDefend MySQL Database privilege escalation	Nieznany	Not Defined	Official Fix	0.00327	0.00	CVE-2011-1906

1 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 1 results.

◂ PoprzedniPrzeglądKolejny ▸

Do you know our Splunk app?

Download it now for free!