Sun Iplanet Web Server vulnerabilities

4 CVEs affecting Sun Iplanet Web Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-2763, published 2009-06-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0183, published 2007-01-12. Medium severity, CVSS 6.8. EPSS: 4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the NS-max-records parameter. NOTE: The provenance of…
CVE-2002-1042, published 2002-10-04. Medium severity, CVSS 5.0. EPSS: 3.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read…
CVE-2001-0606, published 2001-08-22. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service.
CVE-2004-2763, published 2009-06-01. Medium severity, CVSS 5.8. EPSS: 2.2% chance of exploitation in the next 30 days. The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using…