Ca Internet Security Suite Plus 2008 vulnerabilities

4 CVEs affecting Ca Internet Security Suite Plus 2008, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3588, published 2009-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-2511, published 2008-06-02. High severity, CVSS 9.3. EPSS: 10% chance of exploitation in the next 30 days. Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib) ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote attackers to create…
CVE-2009-3587, published 2009-10-13. High severity, CVSS 9.3. EPSS: 7.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust…
CVE-2009-0042, published 2009-01-28. High severity, CVSS 10.0. EPSS: 4.3% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and…
CVE-2009-3588, published 2009-10-13. Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust…