HP Webproxy vulnerabilities

2 CVEs affecting HP Webproxy, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-0492, published 2004-08-06.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-0492, published 2004-08-06. High severity, CVSS 10.0. EPSS: 33.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a…
• CVE-2004-1082, published 2004-02-03. High severity, CVSS 7.5. EPSS: 7.6% chance of exploitation in the next 30 days. mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.