Orionserver: >> Orion Application Server >> 1.4.5 Security Vulnerabilities
Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (dot) and (2) space characters in the extension of a URL.
CVSS Score
5.0
EPSS Score
0.013
Published
2006-03-24
Cross-site scripting (XSS) vulnerability in Orion 1.3.8 and 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting 404 error page.
CVSS Score
4.3
EPSS Score
0.003
Published
2005-09-20