CVE-2002-0385: Vignette Storyserver

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"' (double quote) and and '>' characters, which causes the TCL interpreter to crash and include stack data in the output.

Affected products

• Vignette Storyserver: version 4.1 only; version 6.0 only
• Vignette Vignette: version 5.0 only

Published 2004-06-01. Last modified 2026-06-16.