CVE-2002-1315: Iplanet Web Server

Medium severity, CVSS 6.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).

Affected products

• Iplanet Iplanet Web Server: version 4.1 only; version 4.1_sp1 only; version 4.1_sp2 only; version 4.1_sp3 only; version 4.1_sp4 only; version 4.1_sp5 only; …

Published 2002-11-29. Last modified 2026-06-16.