CVE-2002-0706: Surfcontrol Superscout Web Filter

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.

Affected products

• Surfcontrol Superscout Web Filter: version 3.0 only; version 3.0.3 only
• Surfcontrol Web Filter: version 4.0 only; version 4.1 only

Published 2002-10-10. Last modified 2026-06-16.