GCVE - cpe:2.3:a:sun:iplanet_messaging_server:5.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sun:iplanet_messaging_server:5.2:*:*:*:*:*:*:*

part: a version: 5.2 update: *

Vendor	Sun (`f793a52f-9733-5503-ba70-29fa391cdd2b`)
Product	Iplanet Messaging Server (`02f54e9c-3aa7-5285-b4cf-a866598faa7f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-5486`	vulnerable	2026-06-08 04:49:20.640396	Details available Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages. Published: 2006-10-24T22:00:00.000Z Updated: 2024-08-07T19:55:52.685Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/20708 http://securitytracker.com/id?1017113 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102497-1 http://secunia.com/advisories/22575 http://www.vupen.com/english/advisories/2006/4183	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3159`	vulnerable	2026-06-08 04:49:08.471467	Details available pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified by the CONFIGROOT environment variable, which returns the first line of the file in an error message. Published: 2006-06-22T22:00:00.000Z Updated: 2024-08-07T18:16:05.946Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1016416 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102496-1 http://securitytracker.com/id?1016312 https://exchange.xforce.ibmcloud.com/vulnerabilities/27220 http://www.vupen.com/english/advisories/2006/2633	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2022`	vulnerable	2026-06-08 04:48:28.105092	Details available Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting (XSS) vulnerability. Published: 2005-06-21T04:00:00.000Z Updated: 2024-08-07T22:15:36.731Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2005/0816 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101770-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2766`	vulnerable	2026-06-08 04:48:10.894737	Details available Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail message, related to a "session hijacking" issue, a different vulnerability than CVE-2005-2022 and CVE-2006-5486. Published: 2010-01-28T20:00:00.000Z Updated: 2024-09-16T23:01:25.193Z Open on db.gcve.eu Reference links http://sunsolve.sun.com/search/document.do?assetkey=1-66-201180-1 http://sunsolve.sun.com/search/document.do?assetkey=1-21-116568-55-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2765`	vulnerable	2026-06-08 04:48:10.890791	Details available Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than CVE-2005-2022 and CVE-2006-5486. Published: 2010-01-28T20:00:00.000Z Updated: 2024-09-16T18:28:59.392Z Open on db.gcve.eu Reference links http://sunsolve.sun.com/search/document.do?assetkey=1-66-201601-1 http://sunsolve.sun.com/search/document.do?assetkey=1-21-116568-56-1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.