Intersystems

10 CVEs across 2 Intersystems products. Browse Intersystems vulnerabilities, severities, and proof-of-concept exploits.

Intersystems products with known CVEs

ProductCVEs
Cache Database6
Cache4
Intersystems CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2018-17152Medium6.42019-07-11Intersystems Cache 2017.2.2.865.0 allows XXE.
CVE-2018-17151Medium5.42019-07-11Intersystems Cache 2017.2.2.865.0 has Incorrect Access Control.
CVE-2018-17150Medium6.12019-07-11Intersystems Cache 2017.2.2.865.0 allows XSS.
CVE-2007-44272007-08-20Unspecified vulnerability in the login page redirection logic in the Cache' Server Page (CSP) implementation in InterSystems Cache' 2007.1.0.369.0 and 2007.1.1…
CVE-2007-04372007-08-20Multiple cross-site scripting (XSS) vulnerabilities in the sample Cache' Server Page (CSP) scripts in InterSystems Cache' allow remote attackers to inject arbi…
CVE-2004-26842004-12-31Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows attackers to access certain files on a server, including (1) cache.key and…
CVE-2004-26832004-12-31Unspecified vulnerability in the %XML.Utils.SchemaServer class in InterSystems Cache' 5.0 allows attackers to access arbitrary files on a server.
CVE-2003-13332003-12-31Unspecified vulnerability in the Cache' Server Page (CSP) implementation in InterSystems Cache' 4.0.3 through 5.0.5 allows remote attackers to "gain complete c…
CVE-2003-04982003-08-07Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scr…
CVE-2003-04972003-08-07Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing i…