Litespeed Web Server
Approved changes feed: RSS · Atom
cpe:2.3:a:litespeed_technologies:litespeed_web_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Litespeed Technologies (ac0c24dc-d46e-5b14-9f8f-40ac0cdc1b05) |
|---|---|
| Product | Litespeed Web Server (b26511b2-0868-54e8-9ce2-5eddff10f8d2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-0074 |
vulnerable | 2026-06-08 05:39:09.204858 |
Privilege Escalation in OpenLiteSpeed Web Server
HIGH (8.8)
Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1.
Published: 2022-10-27T19:32:19.200Z
Updated: 2025-05-09T19:19:06.373Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0073 |
vulnerable | 2026-06-08 05:39:09.204335 |
Authenticated Remote Code Execution in OpenLiteSpeed Web Server
HIGH (8.8)
Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.
Published: 2022-10-27T19:30:54.053Z
Updated: 2025-05-05T18:12:47.674Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0072 |
vulnerable | 2026-06-08 05:39:09.200967 |
Directory Traversal in OpenLiteSpeed Web Server
MEDIUM (5.8)
Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1
Published: 2022-10-27T19:28:49.031Z
Updated: 2025-05-09T19:18:17.065Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5654 |
vulnerable | 2026-06-08 04:50:06.643119 |
Details available
LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by reading PHP source code via requests for .php%00.txt files, aka "Mime Type Injection."
Published: 2007-10-23T21:00:00.000Z
Updated: 2024-08-07T15:39:13.607Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.