GCVE - cpe:2.3:a:vignette:content_suite:7.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vignette:content_suite:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

Vendor	Vignette (`0c86851e-0e5b-545e-baf2-cace908c20fb`)
Product	Content Suite (`aacb975f-e3a3-5a93-81f2-eba41d8cb140`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2003-0404`	vulnerable	2026-06-08 04:47:21.456205	Details available Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template. Published: 2003-06-11T04:00:00.000Z Updated: 2024-08-08T01:50:48.020Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/12071.php http://marc.info/?l=bugtraq&m=105406028027360&w=2 http://www.securityfocus.com/bid/7687 http://www.s21sec.com/es/avisos/s21sec-023-en.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0403`	vulnerable	2026-06-08 04:47:21.455781	Details available Vignette StoryServer 5 and Vignette V/5 allows remote attackers to read and modify license information, and cause a denial of service (service halt) by directly accessing the /vgn/license template. Published: 2003-06-11T04:00:00.000Z Updated: 2024-08-08T01:50:47.988Z Open on db.gcve.eu Reference links http://www.s21sec.com/es/avisos/s21sec-021-en.txt http://www.iss.net/security_center/static/12072.php http://www.securityfocus.com/bid/7694 http://marc.info/?l=bugtraq&m=105405789924612&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0402`	vulnerable	2026-06-08 04:47:21.455345	Details available The default login template (/vgn/login) in Vignette StoryServer 5 and Vignette V/5 generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks. Published: 2003-06-11T04:00:00.000Z Updated: 2024-08-08T01:50:47.906Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=105405880325755&w=2 http://www.iss.net/security_center/static/12073.php http://www.securityfocus.com/bid/7691 http://www.s21sec.com/en/avisos/s21sec-020-en.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0401`	vulnerable	2026-06-08 04:47:21.454829	Details available Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template. Published: 2003-06-11T04:00:00.000Z Updated: 2024-08-08T01:50:48.145Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/7688 http://www.iss.net/security_center/static/12074.php http://www.s21sec.com/es/avisos/s21sec-019-en.txt http://marc.info/?l=bugtraq&m=105405793324661&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0399`	vulnerable	2026-06-08 04:47:21.450978	Details available Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds cookie to an arbitrary value and directly accessing the save template. Published: 2003-06-11T04:00:00.000Z Updated: 2024-08-08T01:50:48.054Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=105405874325673&w=2 http://www.iss.net/security_center/static/12076.php http://www.s21sec.com/es/avisos/s21sec-017-en.txt http://www.securityfocus.com/bid/7683	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0398`	vulnerable	2026-06-08 04:47:21.448028	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.