CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2002-1315

Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.021

EPSS Ranking 83.0%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2002-1315

Iplanet » Iplanet Web Server » Version: 4.1

cpe:2.3:a:iplanet:iplanet_web_server:4.1
Iplanet » Iplanet Web Server » Version: 4.1_sp1

cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp1
Iplanet » Iplanet Web Server » Version: 4.1_sp10

cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp10
Iplanet » Iplanet Web Server » Version: 4.1_sp11

cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp11
Iplanet » Iplanet Web Server » Version: 4.1_sp2

cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp2
Iplanet » Iplanet Web Server » Version: 4.1_sp3

cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp3
Iplanet » Iplanet Web Server » Version: 4.1_sp4

cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp4
Iplanet » Iplanet Web Server » Version: 4.1_sp5

cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp5
Iplanet » Iplanet Web Server » Version: 4.1_sp6

cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp6
Iplanet » Iplanet Web Server » Version: 4.1_sp7

cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp7
Iplanet » Iplanet Web Server » Version: 4.1_sp8

cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp8
Iplanet » Iplanet Web Server » Version: 4.1_sp9

cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2002-1315

Products

Pricing

Contact Us