Surfcontrol

12 CVEs across 4 Surfcontrol products. Browse Surfcontrol vulnerabilities, severities, and proof-of-concept exploits.

Surfcontrol products with known CVEs

ProductCVEs
Superscout Web Filter6
Superscout Email Filter5
Web Filter5
Superscout1
Surfcontrol CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2002-15322003-03-31The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion)…
CVE-2002-15312003-03-31The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP re…
CVE-2002-15302003-03-31The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to t…
CVE-2002-15292003-03-31Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote…
CVE-2002-21212002-12-31SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service (crash) via a long SMTP (1) HELO or (2) RCPT TO command…
CVE-2002-07092002-10-10SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the Ru…
CVE-2002-07082002-10-10Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP re…
CVE-2002-07072002-10-10The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU consumption) via large GET requests, poss…
CVE-2002-07062002-10-10UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers t…
CVE-2002-07052002-10-10The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory, which allows remo…
CVE-2001-14652002-02-26SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting…
CVE-2000-01242000-02-03surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions.