LW
Product
LiteSpeed Web Server
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add LiteSpeed Web Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-0074 | 8.8 | Oct 27 | Privilege Escalation in OpenLiteSpeed Web Server Affected: 1.6.15 before 1.7.16.1 |
| CVE-2022-0073 | 8.8 | Oct 27 | Authenticated Remote Code Execution in OpenLiteSpeed Web Server Affected: 1.7.0 before 1.7.16.1 |
| CVE-2022-0072 | 5.8 | Oct 27 | Directory Traversal in OpenLiteSpeed Web Server Affected: 1.5.11 through 1.5.12; 1.6.5 through 1.6.20.1; 1.7.0 before 1.7.16.1 |
| CVE-2007-5654 | – | Oct 23 | LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by… Affected: through 3.2.3 |
| CVE-2005-3695 | – | Nov 20 | Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m… Affected: 2.1.5 |
Showing 5