CVE Tools
Track your stack

3com

40 CVEs tracked since 2001. Since Jul 2001, none of them reached CISA KEV.

3com CVEs per month

Jul 2001 to Mar 2009. Point at a month, or focus the strip and use the arrow keys.
3com CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2001-0710
2001-08null or fewer
2001-0920
2001-10null or fewer
2001-11null or fewer
2001-12null or fewer
2002-01null or fewer
2002-02null or fewer
2002-0320
2002-04null or fewer
2002-0510
2002-0610
2002-07null or fewer
2002-0810
2002-09null or fewer
2002-10null or fewer
2002-11null or fewer
2002-12null or fewer
2003-01null or fewer
2003-02null or fewer
2003-03null or fewer
2003-0410
2003-0510
2003-06null or fewer
2003-07null or fewer
2003-08null or fewer
2003-09null or fewer
2003-10null or fewer
2003-11null or fewer
2003-12null or fewer
2004-01null or fewer
2004-02null or fewer
2004-03null or fewer
2004-04null or fewer
2004-05null or fewer
2004-0610
2004-0710
2004-08null or fewer
2004-09null or fewer
2004-10null or fewer
2004-11null or fewer
2004-12null or fewer
2005-0110
2005-0260
2005-03null or fewer
2005-04null or fewer
2005-0510
2005-06null or fewer
2005-0710
2005-0810
2005-0910
2005-10null or fewer
2005-11null or fewer
2005-12null or fewer
2006-0110
2006-02null or fewer
2006-03null or fewer
2006-0410
2006-0510
2006-06null or fewer
2006-0710
2006-08null or fewer
2006-09null or fewer
2006-1010
2006-11null or fewer
2006-1210
2007-01null or fewer
2007-02null or fewer
2007-03null or fewer
2007-0410
2007-0510
2007-0610
2007-0730
2007-08null or fewer
2007-09null or fewer
2007-1040
2007-11null or fewer
2007-12null or fewer
2008-01null or fewer
2008-02null or fewer
2008-03null or fewer
2008-04null or fewer
2008-05null or fewer
2008-06null or fewer
2008-07null or fewer
2008-08null or fewer
2008-09null or fewer
2008-10null or fewer
2008-11null or fewer
2008-12null or fewer
2009-01null or fewer
2009-02null or fewer
2009-0310

Products

The products that kept showing up in 3com's monthly top three, with their CVEs summed over those months.

  1. 3cdaemon52 months
  2. 3cp414455 months
  3. Tippingpoint Ips Tos43 months
  4. 3crwe454g7222 months
  5. 3crwe554g72t21 month
  6. 3c15100d11 month
  7. 3c1648611 month
  8. 3c17210-us11 month
  9. 3c840-us11 month
  10. 3cnj22011 month

Latest CVEs

The 15 most recently published vulnerabilities affecting 3com.

  1. CVE-2008-6395The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service (device crash) via a malformed HTTP POST request.7.8
  2. CVE-2002-2300Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service (crash) via a long CEL command.7.5
  3. CVE-2007-5419The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external (Internet) interface unless t...10.0
  4. CVE-2007-5420The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured, serves a web page to external clients, which might allow remote attacke...2.6
  5. CVE-2004-2691Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service (device reset) via a crafted request to the web m...7.1
  6. CVE-2007-3711Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets.7.5
  7. CVE-2007-3701TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detecti...7.5
  8. CVE-2007-3533The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service (reboot and reporting outage) via a loopback packet with zero in the length field.5.0
  9. CVE-2006-3974Cross-site scripting (XSS) vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 allows remote attackers to inject arbitrary web script or HTML via the tk parame...4.3
  10. CVE-2007-2734The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP...7.5
  11. CVE-2007-22763Com TippingPoint IPS allows remote attackers to cause a denial of service (device hang) via a flood of packets on TCP port 80 with sequentially increasing source ports, related to a "badly written...7.8
  12. CVE-2006-6183Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long mode field (aka...10.0
  13. CVE-2006-53823Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write Community string and conduct unauthorized actions via unspecified "normal...7.5
  14. CVE-2006-3678TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to "force the device into layer 2 fallback (L2FB)", causing a denial of service (page faul...5.0
  15. CVE-2006-0993The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain directories, which might allow remote attackers to obtain potentially sensitive in...5.0

The record

Peak rank
#13 in Jul 2001
Busiest month shown
Feb 2005, 6 CVEs
Months with a KEV entry
0 since Jul 2001
Monthly snapshots
28 since 2001
3com's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store