Litespeed Web Server

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-54939 Aug 01, 06:15 MEDIUM POC This Month

LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Openlitespeed Litespeed Web Adc Litespeed Web Server Lsquic +1

NVD GitHub

CVSS 3.1

5.3

EPSS

0.1%

CVE-2012-4871 Sep 06, 21:55 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Litespeed Web Server Litespeedtech

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

5.7%

CVE-2025-54939

EPSS 0% CVSS 5.3

MEDIUM POC This Month

Denial Of Service Openlitespeed Litespeed Web Adc +3

NVD GitHub

CVE-2012-4871

EPSS 6% CVSS 4.3

MEDIUM POC This Month

PHP XSS Litespeed Web Server +1

NVD Exploit-DB