Oracle Iplanet Web Server vulnerabilities

7 CVEs affecting Oracle Iplanet Web Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9315, published 2020-05-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-9315, published 2020-05-10. High severity, CVSS 7.5. EPSS: 81.8% chance of exploitation in the next 30 days. ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read…
CVE-2015-7182, published 2015-11-05. Critical severity, CVSS 9.8. EPSS: 10.2% chance of exploitation in the next 30 days. Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4…
CVE-2016-1950, published 2016-03-13. High severity, CVSS 8.8. EPSS: 4.2% chance of exploitation in the next 30 days. Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7,…
CVE-2013-1620, published 2013-02-08. Medium severity, CVSS 4.3. EPSS: 3.7% chance of exploitation in the next 30 days. The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC…
CVE-2012-1738, published 2012-07-17. Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0 allows remote attackers to affect…
CVE-2017-10055, published 2017-10-19. Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware (subcomponent: Admin Graphical User Interface). The supported version that is affected is 7.0. Easily exploitable…
CVE-2020-9314, published 2020-05-10. Medium severity, CVSS 4.8. EPSS: 1.3% chance of exploitation in the next 30 days. ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists…