Ipswitch Instant Messaging vulnerabilities

3 vulnerabilities

Known vulnerabilities in Ipswitch Instant Messaging, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.9CVE-2008-0946ipswitchimserver+1
EPSS score
3.55%
Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files via a .. (dot dot) in the recipient field.3.5CVE-2008-0945ipswitchimserver+1
EPSS score
6.88%
Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in an IP address field.5CVE-2008-0944ipswitchinstant_messaging
EPSS score
11.54%
Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application crash) via a version field containing zero.