Approved changes feed: RSS · Atom

cpe:2.3:a:surfcontrol:superscout_web_filter:3.0.3:*:*:*:*:*:*:*

part: a version: 3.0.3 update: *

VendorSurfcontrol (2825d338-6bdf-5a2c-b809-7a4176ed9e4a)
ProductSuperscout Web Filter (4bb0b6c6-c51a-511b-acad-6c2e7a1e45b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-0709 vulnerable 2026-06-08 04:46:22.070517 Details available
SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs.
Published: 2002-10-03T04:00:00.000Z
Updated: 2024-08-08T02:56:38.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0708 vulnerable 2026-06-08 04:46:22.070176 Details available
Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP request containing ... (triple dot) sequences.
Published: 2002-10-03T04:00:00.000Z
Updated: 2024-08-08T02:56:38.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0707 vulnerable 2026-06-08 04:46:22.069828 Details available
The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU consumption) via large GET requests, possibly due to a buffer overflow.
Published: 2002-10-03T04:00:00.000Z
Updated: 2024-08-08T02:56:38.714Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0706 vulnerable 2026-06-08 04:46:22.069451 Details available
UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.
Published: 2002-10-03T04:00:00.000Z
Updated: 2024-08-08T02:56:38.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0705 vulnerable 2026-06-08 04:46:22.067143 Details available
The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory, which allows remote attackers to obtain valid usernames and crack the passwords.
Published: 2002-10-03T04:00:00.000Z
Updated: 2024-08-08T02:56:38.749Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.