Skip to content
Noroxi

iplanet records

17 published records for vendor iplanet.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    17 records
    • CVE-2001-0746
      45Plan

      Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of servi

      CriticalCVSS 10.0Proof of conceptEPSS 15%

      iplanet · iplanet web serverOct 18, 2001

    • CVE-2000-1077
      42Plan

      Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a lon

      CriticalCVSS 10.0No exploitEPSS 5%

      iplanet · iplanet web serverDec 11, 2000

    • CVE-2001-0431
      40Plan

      Vulnerability in iPlanet Web Server Enterprise Edition 4.x.

      CriticalCVSS 10.0No exploitEPSS 1%

      iplanet · iplanet web serverJul 2, 2001

    • CVE-2002-0845
      34Monitor

      Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chun

      HighCVSS 7.5No exploitEPSS 12%

      iplanet · iplanet web serverAug 12, 2002

    • CVE-2002-0686
      31Monitor

      Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbit

      HighCVSS 7.5No exploitEPSS 4%

      iplanet · iplanet web serverJul 23, 2002

    • CVE-2001-0747
      31Monitor

      Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of

      HighCVSS 7.5No exploitEPSS 2%

      iplanet · iplanet web serverOct 18, 2001

    • CVE-2002-1654
      31Monitor

      iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authenticatio

      HighCVSS 7.5No exploitEPSS 2%

      iplanet · iplanet web serverDec 31, 2002

    • CVE-2002-1316
      28Monitor

      importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell m

      MediumCVSS 6.8No exploitEPSS 2%

      iplanet · iplanet web serverNov 29, 2002

    • CVE-2002-1315
      27Monitor

      Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web s

      MediumCVSS 6.8No exploitEPSS 1%

      iplanet · iplanet web serverNov 29, 2002

    • CVE-2001-0327
      21Monitor

      iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or ca

      MediumCVSS 5.0No exploitEPSS 3%

      iplanet · iplanet web serverJul 2, 2001

    • CVE-2001-0252
      21Monitor

      iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that cont

      MediumCVSS 5.0No exploitEPSS 2%

      iplanet · iplanet enterprise serverJun 2, 2001

    • CVE-2002-1655
      21Monitor

      The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service

      MediumCVSS 5.0No exploitEPSS 2%

      iplanet · iplanet web serverDec 31, 2002

    • CVE-2000-0182
      21Monitor

      iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and ca

      MediumCVSS 5.0No exploitEPSS 1%

      iplanet · iplanet web serverFeb 23, 2000

    • CVE-2001-1368
      20Monitor

      Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corr

      MediumCVSS 5.0No exploitEPSS 0%

      iplanet · iplanet web serverJun 11, 2001

    • CVE-2003-1587
      20Monitor

      Cross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent

      MediumCVSS 5.0No exploitEPSS 0%

      iplanet · loganproFeb 5, 2010

    • CVE-2003-1586
      17Monitor

      Cross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agen

      MediumCVSS 4.3No exploitEPSS 0%

      iplanet · webexpertFeb 5, 2010

    • CVE-2001-0620
      8Monitor

      iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read a

      LowCVSS 2.1No exploitEPSS 0%

      iplanet · calendar serverAug 2, 2001