Ca Xosoft Content Distribution vulnerabilities

4 CVEs affecting Ca Xosoft Content Distribution, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-3984, published 2011-01-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-1223, published 2010-04-07. High severity, CVSS 10.0. EPSS: 16.8% chance of exploitation in the next 30 days. Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or (2) a long string to…
CVE-2010-3984, published 2011-01-07. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and…
CVE-2010-1222, published 2010-04-07. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request.
CVE-2010-1221, published 2010-04-07. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request.