Litespeed Technologies Litespeed Web Server vulnerabilities

5 vulnerabilities

Known vulnerabilities in Litespeed Technologies Litespeed Web Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2007-5654litespeed_technologieslitespeed_web_server
EPSS score
41.06%
LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by reading PHP source code via requests for .php%00.txt files, aka "Mime Type Injection."4.3CVE-2005-3695litespeed_technologieslitespeed_web_server
EPSS score
1.93%
Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m parameter.8.8CVE-2022-0074litespeed_technologieslitespeed_web_server+2
EPSS score
1.26%
Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1.8.8CVE-2022-0073litespeed_technologieslitespeed_web_server+2
EPSS score
9.21%
Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.5.8CVE-2022-0072litespeed_technologieslitespeed_web_server+2
EPSS score
0.99%
Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1