Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Redhat Subscribe
Filtered by product Interchange
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-12685 1 Redhat 1 Interchange 2020-05-18 4.3 MEDIUM 6.1 MEDIUM
XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentials or data via browser JavaScript.
CVE-2002-0874 1 Redhat 1 Interchange 2008-09-10 5.0 MEDIUM N/A
Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files.
CVE-2003-1138 1 Redhat 1 Interchange 2008-09-05 5.0 MEDIUM N/A
The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash (//).