brs 相關的公開 CVE 漏洞與安全風險資訊，提供 CVSS、EPSS、公開時間與漏洞情報資料，協助評估潛在風險與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2003-1165 | Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with a long User-Agent header. | [email protected] | 5.0 | 5.57% | 2003-12-31 | 2026-06-16 |
| CVE-2003-0409 | Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP (1) POST or (2) HEAD request. | [email protected] | 10.0 | 7.97% | 2003-06-30 | 2026-06-16 |
| CVE-2002-1546 | BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence. | [email protected] | 7.5 | 1.77% | 2003-03-31 | 2026-06-16 |
| CVE-2001-0453 | Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the (1) syshelp, (2) sysimages, or (3) scripts directories. | [email protected] | 5.0 | 1.87% | 2001-06-27 | 2026-06-16 |
| CVE-2001-0452 | BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command. | [email protected] | 5.0 | 3.33% | 2001-06-27 | 2026-06-16 |