CVE-2007-1168 json
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and rec…
published 2007-02-28 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-1165
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.5%
- EPSS 2.5% chance of exploitation in 30 days, percentile 84%
- public exploits
- 0
- none known
Summary
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
Patch / fix
Exploit prediction
2.52% chance of exploitation in the next 30 days, higher than 84% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
trendmicro.com
/download/product.asp?productid=20
patch
-
securityfocus.com
/bid/22662
vdb-entry, patch
-
securitytracker.com
/id?1017685
vdb-entry, patch
-
secunia.com
/advisories/24264
third-party-advisory, patch, vendor-advisory
-
labs.idefense.com
/intelligence/vulnerabilities/display.php?id=477
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2007/0691
vdb-entry
Sources
- CVE List CVE-2007-1168
- NVD CVE-2007-1168
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.