Symantec Raptor Firewall vulnerabilities

6 CVEs affecting Symantec Raptor Firewall, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-1463, published 2003-06-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2002-1463, published 2003-06-09. High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days. Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial…
CVE-2002-1535, published 2003-03-31. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates…
CVE-2002-2294, published 2002-12-31. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote…
CVE-2001-0483, published 2001-06-18. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set.
CVE-2002-0990, published 2002-10-28. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of…
CVE-2002-0538, published 2002-07-03. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports,…