Rsa Ace Server vulnerabilities

2 CVEs affecting Rsa Ace Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2417, published 2007-07-15.

More from Rsa.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-2417, published 2007-07-15. High severity, CVSS 10.0. EPSS: 16.2% chance of exploitation in the next 30 days. Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0, ACE/Server 5.2, and…
• CVE-2000-0522, published 2000-06-08. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port with UDP packets, which causes the server to crash.