Interchange (Redhat) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2020-05-15. Vendor: Redhat.

CVEs of Interchange

• CVE-2020-12685 - CVSS 6.1 (medium), 2020-05-15: XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentials or…
• CVE-2003-1138 - CVSS 5 (medium), 2003-10-27: The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is…
• CVE-2002-0874 - CVSS 5 (medium), 2002-09-05: Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files.