Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 29/11/2002 Updated: 18/10/2016

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote malicious users to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).

Vulnerable Product	Search on Vulmon	Subscribe to Product
iplanet iplanet web server 4.1_sp10
iplanet iplanet web server 4.1_sp11
iplanet iplanet web server 4.1_sp8
iplanet iplanet web server 4.1_sp9
iplanet iplanet web server 4.1_sp2
iplanet iplanet web server 4.1_sp3
iplanet iplanet web server 4.1
iplanet iplanet web server 4.1_sp1
iplanet iplanet web server 4.1_sp6
iplanet iplanet web server 4.1_sp7
iplanet iplanet web server 4.1_sp4
iplanet iplanet web server 4.1_sp5

NVD-CWE-Other http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1 http://www.securityfocus.com/bid/6202 http://www.iss.net/security_center/static/10692.php http://marc.info/?l=bugtraq&m=103772308030269&w=2 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-1315

Vulnerability Summary

References

Vulmon Search

About

Products

Connect