Micro Focus Visibroker vulnerabilities

5 CVEs affecting Micro Focus Visibroker, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-9283, published 2017-09-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-7126, published 2009-08-31. High severity, CVSS 10.0. EPSS: 10% chance of exploitation in the next 30 days. Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a…
CVE-2008-7127, published 2009-08-31. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) via a crafted packet with a large string length value to UDP port…
CVE-2017-9283, published 2017-09-21. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.
CVE-2017-9282, published 2017-09-21. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this…
CVE-2017-9281, published 2017-09-21. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. An integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability in Micro Focus VisiBroker 8.5 can lead to a denial of service.