Approved changes feed: RSS · Atom
cpe:2.3:a:vignette:vignette:5.0:*:*:*:*:*:*:*
part: a version: 5.0 update: *
| Vendor | Vignette (0c86851e-0e5b-545e-baf2-cace908c20fb) |
|---|---|
| Product | Vignette (f5268ee8-6c77-5a1b-abd0-ee60c6c2066f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/vignetteapp/vignette |
purl2cpe | 2026-06-01 10:16:08.113880 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2003-0405 |
vulnerable | 2026-06-08 04:47:21.461744 |
Details available
Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS command, or (2) an HTTP Referrer that is processed in the VALID_PATHS command.
Published: 2003-06-11T04:00:00.000Z
Updated: 2024-08-08T01:50:47.699Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0404 |
vulnerable | 2026-06-08 04:47:21.456267 |
Details available
Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template.
Published: 2003-06-11T04:00:00.000Z
Updated: 2024-08-08T01:50:48.020Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0403 |
vulnerable | 2026-06-08 04:47:21.455847 |
Details available
Vignette StoryServer 5 and Vignette V/5 allows remote attackers to read and modify license information, and cause a denial of service (service halt) by directly accessing the /vgn/license template.
Published: 2003-06-11T04:00:00.000Z
Updated: 2024-08-08T01:50:47.988Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0402 |
vulnerable | 2026-06-08 04:47:21.455411 |
Details available
The default login template (/vgn/login) in Vignette StoryServer 5 and Vignette V/5 generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks.
Published: 2003-06-11T04:00:00.000Z
Updated: 2024-08-08T01:50:47.906Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0401 |
vulnerable | 2026-06-08 04:47:21.454905 |
Details available
Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template.
Published: 2003-06-11T04:00:00.000Z
Updated: 2024-08-08T01:50:48.145Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0400 |
vulnerable | 2026-06-08 04:47:21.453366 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0399 |
vulnerable | 2026-06-08 04:47:21.451050 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0398 |
vulnerable | 2026-06-08 04:47:21.450555 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0385 |
vulnerable | 2026-06-08 04:46:21.340309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.