Ca Gateway Security vulnerabilities

4 CVEs affecting Ca Gateway Security, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2667, published 2011-07-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-2667, published 2011-07-28. High severity, CVSS 10.0. EPSS: 16.2% chance of exploitation in the next 30 days. Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute…
CVE-2011-0758, published 2011-02-10. High severity, CVSS 10.0. EPSS: 8.2% chance of exploitation in the next 30 days. The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a…
CVE-2009-3587, published 2009-10-13. High severity, CVSS 9.3. EPSS: 7.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust…
CVE-2009-3588, published 2009-10-13. Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust…