GCVE - cpe:2.3:a:vignette:content_suite:5.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vignette:content_suite:5.0:*:*:*:*:*:*:*

part: a version: 5.0 update: *

Vendor	Vignette (`0c86851e-0e5b-545e-baf2-cace908c20fb`)
Product	Content Suite (`aacb975f-e3a3-5a93-81f2-eba41d8cb140`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2003-0405`	vulnerable	2026-06-08 04:47:21.456599	Details available Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS command, or (2) an HTTP Referrer that is processed in the VALID_PATHS command. Published: 2003-06-11T04:00:00.000Z Updated: 2024-08-08T01:50:47.699Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/12070.php http://www.s21sec.com/es/avisos/s21sec-024-en.txt http://marc.info/?l=bugtraq&m=105405922826197&w=2 http://www.securityfocus.com/bid/7692 http://www.securityfocus.com/bid/7690	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0404`	vulnerable	2026-06-08 04:47:21.456168	Details available Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template. Published: 2003-06-11T04:00:00.000Z Updated: 2024-08-08T01:50:48.020Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/12071.php http://marc.info/?l=bugtraq&m=105406028027360&w=2 http://www.securityfocus.com/bid/7687 http://www.s21sec.com/es/avisos/s21sec-023-en.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0403`	vulnerable	2026-06-08 04:47:21.455742	Details available Vignette StoryServer 5 and Vignette V/5 allows remote attackers to read and modify license information, and cause a denial of service (service halt) by directly accessing the /vgn/license template. Published: 2003-06-11T04:00:00.000Z Updated: 2024-08-08T01:50:47.988Z Open on db.gcve.eu Reference links http://www.s21sec.com/es/avisos/s21sec-021-en.txt http://www.iss.net/security_center/static/12072.php http://www.securityfocus.com/bid/7694 http://marc.info/?l=bugtraq&m=105405789924612&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0402`	vulnerable	2026-06-08 04:47:21.455304	Details available The default login template (/vgn/login) in Vignette StoryServer 5 and Vignette V/5 generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks. Published: 2003-06-11T04:00:00.000Z Updated: 2024-08-08T01:50:47.906Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=105405880325755&w=2 http://www.iss.net/security_center/static/12073.php http://www.securityfocus.com/bid/7691 http://www.s21sec.com/en/avisos/s21sec-020-en.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0401`	vulnerable	2026-06-08 04:47:21.454766	Details available Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template. Published: 2003-06-11T04:00:00.000Z Updated: 2024-08-08T01:50:48.145Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/7688 http://www.iss.net/security_center/static/12074.php http://www.s21sec.com/es/avisos/s21sec-019-en.txt http://marc.info/?l=bugtraq&m=105405793324661&w=2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.