Enterprise Server

Vendor:

First CVE: Dec 10, 1996 · Active for 29 years

24
Total CVEs
More Total CVEs than 95% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
6.1
Avg CVSS
Higher Avg CVSS than 24% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Enterprise Server over time

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 10, 1996
29 years ago
Most Recent CVE
Jan 31, 2019
2,731 days ago

CVE Severity & Scoring

Enterprise Server24 CVEs
All CVEs352,294 CVEs
MediumHigh
Attack Vector
Local0 (0.0%)
Network2 (8.3%)
Unknown22 (91.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (4.2%)
High1 (4.2%)
Unknown22 (91.7%)
User Interaction
None1 (4.2%)
Unknown22 (91.7%)
Required1 (4.2%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None2 (8.3%)
Unknown22 (91.7%)

Top CVEs

Signals from CVEs in this product scope (24 CVEs).

24 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
List of arbitrary files on Web host via nph-test-cgi script.
Dec 10, 19967.543NOYES
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 clie
Dec 31, 20047.529NONO
Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.
Jan 4, 20007.528NOYES
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
Feb 6, 19987.028NONO
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
Dec 1, 199910.027NONO
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.
Mar 12, 200110.026NONO
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
Dec 19, 19995.025NOYES
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.
Mar 17, 20005.024NOYES
Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.
Sep 13, 19995.024NOYES
Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.
Jul 6, 19995.024NOYES

Exploit Exposure

Signals from CVEs in this product scope (24 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
10 CVEs
41.7% of CVEs· 91st percentile

Social Chatter

Signals from CVEs in this product scope (24 CVEs).

Media Mentions

Signals from CVEs in this product scope (24 CVEs).

Top CNAs Publishing CVEs For Enterprise Server

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
5.027.512.5%00
4.1.127.512.5%00
4.117.522.5%00
4.026.313.0%01
3.6316.11.4%00
3.696.910.2%03
3.5.166.37.7%02
3.546.810.4%00
3.436.79.2%00
3.336.79.2%00
3.236.79.2%00
3.136.79.2%00
3.0l17.522.5%00
3.0.7a26.315.2%01
3.0.1b26.315.1%00
3.0.117.522.5%00
3.076.08.2%02
2.0a27.524.3%01
2.0.1c17.522.5%00
2.047.58.8%00