Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:iplanet_web_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductIplanet Web Server (0054ec06-2e9e-5ce9-ab20-55c5571b3e55)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9315 vulnerable 2026-06-08 05:27:21.151906 Details available
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE: a related support policy can be found in the www.oracle.com references attached to this CVE.
Published: 2020-05-10T22:23:02.000Z
Updated: 2024-08-04T10:26:16.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9314 vulnerable 2026-06-08 05:27:21.151471 Details available
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists because of an incomplete fix for CVE-2012-0516. NOTE: a related support policy can be found in the www.oracle.com references attached to this CVE.
Published: 2020-05-10T22:23:34.000Z
Updated: 2024-08-04T10:26:16.041Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.