Back to CVE Browser

CVE-2007-2354

HIGH

7.8

CVSS Severity Score

EPSS Score0.1260%

EPSS Percentile15.24th

PublishedApr 30, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Progress Webspeed Messenger allows remote attackers to obtain sensitive information via a WService parameter containing "wsbroker1/webutil/about.r", which reveals the operating system and product information.

Affected Platforms (CPE)

📦

Progress

Webspeed Messenger

All versions

References & Advisories

🔗 http://www.ishare.nl/

🔗 http://www.securityfocus.com/archive/1/467184/100/0/threaded

🔗 http://www.ishare.nl/

🔗 http://www.securityfocus.com/archive/1/467184/100/0/threaded

Related Vulnerabilities

CVE-2007-226610.0

Progress Webspeed Messenger allows remote attackers to read, create, modify, and execute arbitrary files by invoking webutil/_cpyf...

CVE-2007-25067.8

WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attackers to cause...

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...