CVEブラウザに戻る

CVE-2007-2354

HIGH

7.8

CVSS Severity Score

EPSS Score0.1260%

EPSS Percentile15.24th

Published2007年4月30日

Last Modified2026年4月23日

Vulnerability Description

Progress Webspeed Messenger allows remote attackers to obtain sensitive information via a WService parameter containing "wsbroker1/webutil/about.r", which reveals the operating system and product information.

Affected Platforms (CPE)

📦

Progress

Webspeed Messenger

All versions

References & Advisories

🔗 http://www.ishare.nl/

🔗 http://www.securityfocus.com/archive/1/467184/100/0/threaded

🔗 http://www.ishare.nl/

🔗 http://www.securityfocus.com/archive/1/467184/100/0/threaded

関連する脆弱性情報

CVE-2007-226610.0

Progress Webspeed Messenger allows remote attackers to read, create, modify, and execute arbitrary files by invoking webutil/_cpyf...

CVE-2007-25067.8

WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attackers to cause...

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...