← Vulnerability feed

Vulnerability record · CVE-2004-1532 · published 31 December 2004

CVE-2004-1532: Appserv open project appserv vulnerability

AAppserv Open Project · Appserv

AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.

7.5 CVSS 2.0 High EPSS 1.5% · top 26.3%
7.5CVSS 2.0 base score
1.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=110079586328430&w=2
http://www.securityfocus.com/bid/11704
https://exchange.xforce.ibmcloud.com/vulnerabilities/18163
http://marc.info/?l=bugtraq&m=110079586328430&w=2
http://www.securityfocus.com/bid/11704
https://exchange.xforce.ibmcloud.com/vulnerabilities/18163

Track CVE-2004-1532 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.0CVE-2006-0125Appserv open project appserv vulnerabilityUnspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appserv_root parameter. NOT…EPSS 6.3%4.3CVE-2008-2398Appserv open project appserv cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary web scri…EPSS 6.2%

Source: NIST National Vulnerability Database (record CVE-2004-1532), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.