F Secure Policy Manager vulnerabilities

4 vulnerabilities

Known vulnerabilities in F Secure Policy Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2007-2964f-securepolicy_manager
EPSS score
3.56%
The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service (application crash) via NTFS reserved words in filenames in URLs.5CVE-2011-1103f-securepolicy_manager
EPSS score
1.96%
The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to obtain sensitive information via a request to an invalid report, which reveals the installation path in an error message, as demonstrated with requests to (1) report/infection-table.html or (2) report/productsummary-table.html.4.3CVE-2011-1102f-securepolicy_manager
EPSS score
1.86%
Cross-site scripting (XSS) vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.5CVE-2004-1223f-securepolicy_manager
EPSS score
2.94%
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, via an HTTP request to fsmsh.dll without any parameters.