IBM WebSphere Caching Proxy Server vulnerabilities

4 CVEs affecting IBM WebSphere Caching Proxy Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-0684, published 2004-08-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2002-1169, published 2002-11-04. Medium severity, CVSS 5.0. EPSS: 7.1% chance of exploitation in the next 30 days. IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service (crash) via an HTTP request to helpout.exe with a missing HTTP version…
CVE-2002-1167, published 2002-11-04. Medium severity, CVSS 6.8. EPSS: 3.3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.
CVE-2002-1168, published 2002-11-04. Medium severity, CVSS 6.8. EPSS: 1.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP request that…
CVE-2004-0684, published 2004-08-06. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allows remote attackers to cause a denial of service via an HTTP GET request without…