Unscored severity · published May 23, 2008
CVE-2008-2424
Unspecified vulnerability in the 404 error page for the "Standard demo" in Interchange before 5.6.0 and before 5.5.2 has unknown impact and attack vectors
–
CVSS
1.6%
EPSS
No
On KEV
Description
Unspecified vulnerability in the 404 error page for the "Standard demo" in Interchange before 5.6.0 and before 5.5.2 has unknown impact and attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Interchange · Icdevgroup
through 5.5.3; 4.5.6; 4.5.7; 4.5.8; 4.6.0; 4.6.1; +30 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2424
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2424
ftp.icdevgroup.org
http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt
ftp.icdevgroup.org
http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt
Patch
http://secunia.com/advisories/30346
www.vupen.com
http://www.vupen.com/english/advisories/2008/1621/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42583
More from Interchange
–
CVE-2008-6945
Multiple cross-site scripting (XSS) vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script…