Novell Web Server vulnerabilities

2 CVEs affecting Novell Web Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-1999-1081, published 2002-01-15.

More from Novell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-1999-0175, published 1996-07-01. Medium severity, CVSS 5.0. EPSS: 6.2% chance of exploitation in the next 30 days. The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server.
• CVE-1999-1081, published 2002-01-15. Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days. Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files.