IBM Egatherer vulnerabilities

2 CVEs affecting IBM Egatherer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-4221, published 2006-08-18.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-4221, published 2006-08-18. High severity, CVSS 9.3. EPSS: 8.9% chance of exploitation in the next 30 days. Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer…
• CVE-2004-2663, published 2004-12-31. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. The (1) SetDebugging and (2) RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a…