Sun iPlanet Web Server 4.1 SP7 Enterprise
Approved changes feed: RSS · Atom
cpe:2.3:a:sun:iplanet_web_server:4.1:sp7:enterprise:*:*:*:*:*
part: a version: 4.1 update: sp7
| Vendor | Sun (f793a52f-9733-5503-ba70-29fa391cdd2b) |
|---|---|
| Product | Iplanet Web Server (ddd104bc-c5fc-55e2-bb44-0d3326bfbadc) |
| Edition | enterprise |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-0183 |
vulnerable | 2026-06-08 04:49:31.627693 |
Details available
Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the NS-max-records parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2007-01-11T02:00:00.000Z
Updated: 2024-08-07T12:12:17.138Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2763 |
vulnerable | 2026-06-08 04:48:10.826461 |
Details available
The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.
Published: 2009-06-01T22:00:00.000Z
Updated: 2024-09-17T00:11:42.049Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1042 |
vulnerable | 2026-06-08 04:46:22.789527 |
Details available
Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.
Published: 2002-08-31T04:00:00.000Z
Updated: 2024-08-08T03:12:16.865Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.