Approved changes feed: RSS · Atom

cpe:2.3:a:orion:orion_application_server:2.0.7:*:*:*:*:*:*:*

part: a version: 2.0.7 update: *

VendorOrion (071bfefb-2922-576d-953a-983000b74cd6)
ProductOrion Application Server (2190cc4b-7c09-5751-bff3-90f34394b4cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4493 vulnerable 2026-06-08 04:51:48.653922 Details available
Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
Published: 2010-01-13T20:00:00.000Z
Updated: 2024-08-07T07:01:20.803Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.