6.8
CVE-2002-1316
- EPSS 1.35%
- Published 29.11.2002 05:00:00
- Last modified 03.04.2025 01:03:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).
Data is provided by the National Vulnerability Database (NVD)
Iplanet ≫ Iplanet Web Server Version4.1
Iplanet ≫ Iplanet Web Server Version4.1_sp1
Iplanet ≫ Iplanet Web Server Version4.1_sp2
Iplanet ≫ Iplanet Web Server Version4.1_sp3
Iplanet ≫ Iplanet Web Server Version4.1_sp4
Iplanet ≫ Iplanet Web Server Version4.1_sp5
Iplanet ≫ Iplanet Web Server Version4.1_sp6
Iplanet ≫ Iplanet Web Server Version4.1_sp7
Iplanet ≫ Iplanet Web Server Version4.1_sp8
Iplanet ≫ Iplanet Web Server Version4.1_sp9
Iplanet ≫ Iplanet Web Server Version4.1_sp10
Iplanet ≫ Iplanet Web Server Version4.1_sp11
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.35% | 0.783 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|