What’s Vulnerable › Vulnerabilities

CVE-2008-1700

• Severity: high (CVSS 7.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2008-04-08 · updated 2026-06-16
• Weakness: CWE-770

Description

The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large number of SendNrlLink directives, which opens a separate window for each directive.

Affected products

• Interwoven Worksite Web: through 8.2

References

• http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41757
• http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41757

Get alerted when CVE-2008-1700 or the next vulnerability affects your stack