Storyserver
Approved changes feed: RSS · Atom
cpe:2.3:a:vignette:storyserver:4.1:*:*:*:*:*:*:*
part: a version: 4.1 update: *
| Vendor | Vignette (0c86851e-0e5b-545e-baf2-cace908c20fb) |
|---|---|
| Product | Storyserver (1d8b15b5-dedf-5a16-9cbc-dc2d70056561) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2003-0404 |
vulnerable | 2026-06-08 04:47:21.456237 |
Details available
Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template.
Published: 2003-06-11T04:00:00.000Z
Updated: 2024-08-08T01:50:48.020Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0403 |
vulnerable | 2026-06-08 04:47:21.455814 |
Details available
Vignette StoryServer 5 and Vignette V/5 allows remote attackers to read and modify license information, and cause a denial of service (service halt) by directly accessing the /vgn/license template.
Published: 2003-06-11T04:00:00.000Z
Updated: 2024-08-08T01:50:47.988Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0402 |
vulnerable | 2026-06-08 04:47:21.455379 |
Details available
The default login template (/vgn/login) in Vignette StoryServer 5 and Vignette V/5 generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks.
Published: 2003-06-11T04:00:00.000Z
Updated: 2024-08-08T01:50:47.906Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0401 |
vulnerable | 2026-06-08 04:47:21.454869 |
Details available
Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template.
Published: 2003-06-11T04:00:00.000Z
Updated: 2024-08-08T01:50:48.145Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0400 |
vulnerable | 2026-06-08 04:47:21.451441 |
Details available
Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, as demonstrated using the "-->" string in a CookieName argument to the login template, referred to as a "memory leak" in some reports.
Published: 2003-06-11T04:00:00.000Z
Updated: 2024-08-08T01:50:48.069Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0399 |
vulnerable | 2026-06-08 04:47:21.451015 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0398 |
vulnerable | 2026-06-08 04:47:21.449201 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0385 |
vulnerable | 2026-06-08 04:46:21.338742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.