Sun

Iplanet Web Server

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.8

CVE-2004-2763

Exploit
  • EPSS 0.65%
  • Published 01.06.2009 22:30:00
  • Last modified 09.04.2025 00:30:58

The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that...

6.8

CVE-2007-0183

Exploit
  • EPSS 4.5%
  • Published 12.01.2007 05:04:00
  • Last modified 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the NS-max-records parameter. NOTE: The provenance of this information is unknown; the details are obtai...

5

CVE-2002-1042

Exploit
  • EPSS 8.58%
  • Published 04.10.2002 04:00:00
  • Last modified 03.04.2025 01:03:51

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequence...

5

CVE-2001-0606

  • EPSS 0.46%
  • Published 22.08.2001 04:00:00
  • Last modified 03.04.2025 01:03:51

Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service.