Oracle Corporate Time Outlook Connector vulnerabilities

3 CVEs affecting Oracle Corporate Time Outlook Connector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-0659, published 2002-08-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2002-0656, published 2002-08-12. High severity, CVSS 7.5. EPSS: 89.8% chance of exploitation in the next 30 days. Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in…
CVE-2002-0659, published 2002-08-12. Medium severity, CVSS 5.0. EPSS: 36.2% chance of exploitation in the next 30 days. The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.
CVE-2002-0655, published 2002-08-12. High severity, CVSS 7.5. EPSS: 8.2% chance of exploitation in the next 30 days. OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and…