CVE-2005-1994: Finjan Software Surfingate

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a filename, as demonstrated using "%2e".

Affected products

• Finjan Software Surfingate: version 7.0_sp2 only; version 7.0_sp3 only

Published 2005-06-14. Last modified 2026-06-16.