Webwasher

webwasher

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2005-4514 1Webwasher 1Csm Appliance Suite Apr 16, 2026 Dec 23, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can be upper or lower case...Show more The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can be upper or lower case. NOTE: the vendor has stated that this problem could not be reproduced, and has asked the researcher for more information, without a response as of 20060103Show less
CVE-2005-0316 1Webwasher 1Webwasher Classic Apr 16, 2026 Jan 28, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2005-4514

1Webwasher

1Csm Appliance Suite

Apr 16, 2026

Dec 23, 2005

N/A· v4

N/A· v3

5.0 MEDIUM· v2

The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can be upper or lower case. NOTE: the vendor has stated that this problem could not be reproduced, and has asked the researcher for more information, without a response as of 20060103Show less

CVE-2005-0316

1Webwasher

1Webwasher Classic

Apr 16, 2026

Jan 28, 2005

N/A· v4

N/A· v3

7.5 HIGH· v2

WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions.