CVE-2007-0183

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2007-0183
Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the NS-max-records parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://osvdb.org/32662
http://secunia.com/advisories/23605 Patch Vendor Advisory
http://www.securityfocus.com/bid/21977 Exploit Patch Vendor Advisory
http://osvdb.org/32662
http://secunia.com/advisories/23605 Patch Vendor Advisory
http://www.securityfocus.com/bid/21977 Exploit Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sun:iplanet_web_server:4.1:*:*:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp1:*:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp1:enterprise:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp10:*:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp10:enterprise:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp2:*:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp2:enterprise:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp3:*:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp3:enterprise:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp4:*:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp4:enterprise:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp5:*:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp5:enterprise:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp6:*:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp6:enterprise:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp7:*:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp7:enterprise:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp8:*:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp8:enterprise:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp9:*:*:*:*:*:*
cpe:2.3:a:sun:iplanet_web_server:4.1:sp9:enterprise:*:*:*:*:*
History

21 Nov 2024, 00:25

Type Values Removed Values Added
References () http://osvdb.org/32662 - () http://osvdb.org/32662 -
References () http://secunia.com/advisories/23605 - Patch, Vendor Advisory () http://secunia.com/advisories/23605 - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/21977 - Exploit, Patch, Vendor Advisory () http://www.securityfocus.com/bid/21977 - Exploit, Patch, Vendor Advisory
Information

Published : 2007-01-12 05:04

Updated : 2025-04-09 00:30

NVD link : CVE-2007-0183

Mitre link : CVE-2007-0183

CVE.ORG link : CVE-2007-0183

JSON object : View

Products Affected

sun

  • iplanet_web_server
CWE
NVD-CWE-Other