Embedthis 漏洞

时间轴

类型

Web Server6
Not Defined6
Software Library2

产品

EmbedThis Appweb6
EmbedThis GoAhead Webserver6
EmbedThis GoAhead4
EmbedThis HTTP Library2
EmbedThis Appweb Community Edition2

修正

Official Fix10
Temporary Fix0
Workaround0
Unavailable0
Not Defined4

易受攻击性

High2
Functional0
Proof-of-Concept0
Unproven0
Not Defined12

访问向量

Not Defined0
Physical0
Local0
Adjacent4
Network10

身份验证

Not Defined0
High0
Low2
None12

用户交互

Not Defined0
Required0
None14

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤50
≤60
≤78
≤82
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤50
≤60
≤78
≤82
≤92
≤100

VulDB

≤10
≤20
≤30
≤44
≤50
≤66
≤70
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤86
≤92
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k4
<2k10
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k14
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (5): Appweb (4), Appweb Community Edition (1), GoAhead (7), GoAhead Webserver (3), HTTP Library (1)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2022-08-096.46.4EmbedThis GoAhead Webserver Nonce websda.c 弱加密Web ServerNot DefinedNot Defined0.002900.02CVE-2021-41615
2022-06-033.53.5EmbedThis Appweb Community Edition httpLib.c parseUri 拒绝服务未知Not DefinedNot Defined0.000860.03CVE-2021-33254
2019-11-226.36.2EmbedThis GoAhead HTTP Header 内存损坏未知Not DefinedOfficial Fix0.002480.02CVE-2019-19240
2019-09-207.97.9EmbedThis GoAhead login 权限升级未知Not DefinedNot Defined0.007900.00CVE-2019-16645
2019-06-147.47.2EmbedThis GoAhead Header Parsing http.c 内存损坏未知Not DefinedOfficial Fix0.174410.04CVE-2019-12822
2018-08-186.46.3EmbedThis GoAhead/Appweb HTTP POST Request 拒绝服务未知Not DefinedOfficial Fix0.002720.02CVE-2018-15505
2018-08-186.46.3EmbedThis GoAhead/Appweb HTTP Request 拒绝服务未知Not DefinedOfficial Fix0.005310.04CVE-2018-15504
2018-03-157.77.5EmbedThis HTTP Library/Appweb httpLib.c authCondition 弱身份验证Software LibraryHighOfficial Fix0.009270.04CVE-2018-8715
2018-01-038.58.5EmbedThis GoAhead Webserver CGI 拒绝服务Web ServerNot DefinedOfficial Fix0.003200.02CVE-2017-1000471
2018-01-036.46.4EmbedThis GoAhead Webserver HTTP Listener 内存损坏Web ServerNot DefinedOfficial Fix0.000910.00CVE-2017-1000470

3 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 3 results.

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!