What’s Vulnerable › Vulnerabilities

CVE-2007-2690

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-05-16 · updated 2026-06-16

Description

Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.

Affected products

• ISS Proventia A Series Xpu: through 22.10; 20.11, 22.1, 22.2, 22.3, 22.4, 22.5 (+1)
• ISS Proventia G Series Xpu: through 22.11; 22.1, 22.2, 22.3, 22.4, 22.5, 22.6 (+4)
• ISS Proventia M Series Xpu: through 1.9; 1.1, 1.2, 1.3, 1.4, 1.5, 1.6 (+2)

References

• http://www.gamasec.net/english/gs07-01.html
• http://www.kb.cert.org/vuls/id/739224
• http://www.securityfocus.com/archive/1/468633/100/0/threaded
• http://www.securitytracker.com/id?1018068
• http://www.gamasec.net/english/gs07-01.html
• http://www.kb.cert.org/vuls/id/739224
• http://www.securityfocus.com/archive/1/468633/100/0/threaded
• http://www.securitytracker.com/id?1018068

Get alerted when CVE-2007-2690 or the next vulnerability affects your stack