Solaris Answerbook2
Vendor:
First CVE: Oct 20, 2000 · Active for 25 years
6
Total CVEs
More Total CVEs than 83% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 63% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 49% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Solaris Answerbook2 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 20, 2000
25 years ago
Most Recent CVE
May 2, 2005
7,756 days ago
CVE Severity & Scoring
Solaris Answerbook26 CVEs
33%
67%
All CVEs352,785 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown6 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown6 (100.0%)
User Interaction
None0 (0.0%)
Unknown6 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown6 (100.0%)
Top CVEs
Signals from CVEs in this product scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2002-2425HIGH Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as (1) AdminViewError and (2) AdminAddadmin via a direct request. | Dec 31, 2002 | 10.0 | 42 | NO | YES |
CVE-2000-0697HIGH The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters. | Oct 20, 2000 | 10.0 | 40 | NO | YES |
CVE-2000-0696HIGH The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers | Oct 20, 2000 | 7.5 | 31 | NO | YES |
CVE-2005-0549MEDIUM Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Fil | May 2, 2005 | 4.3 | 21 | NO | YES |
CVE-2005-0548MEDIUM Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search functi | Mar 7, 2005 | 4.3 | 21 | NO | YES |
CVE-2002-0360HIGH Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program. | Jun 25, 2002 | 7.5 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (6 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
5 CVEs
83.3% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (6 CVEs).
Media Mentions
Signals from CVEs in this product scope (6 CVEs).
Top CNAs Publishing CVEs For Solaris Answerbook2
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.4.4 | 1 | 4.3 | 1.7% | 0 | 1 |
| 1.4.3 | 2 | 5.9 | 2.5% | 0 | 1 |
| 1.4.2 | 5 | 7.9 | 5.4% | 0 | 4 |
| 1.4.1 | 5 | 7.9 | 5.4% | 0 | 4 |
| 1.4 | 5 | 7.9 | 5.4% | 0 | 4 |
| 1.3 | 4 | 8.0 | 5.9% | 0 | 4 |
| 1.2 | 2 | 7.2 | 2.6% | 0 | 2 |