Skip to content
Noroxi

orionserver records

3 published records for vendor orionserver.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    3 records
    • CVE-2006-0816
      21Monitor

      Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) .

      MediumCVSS 5.0No exploitEPSS 2%

      orionserver · orion application serverMar 24, 2006

    • CVE-2002-1859
      21Monitor

      Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains

      MediumCVSS 5.0No exploitEPSS 2%

      orionserver · orion application serverDec 31, 2002

    • CVE-2005-2981
      17Monitor

      Cross-site scripting (XSS) vulnerability in Orion 1.3.8 and 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the URL

      MediumCVSS 4.3No exploitEPSS 0%

      orionserver · orion application serverSep 19, 2005