Skip to content
Noroxi

vignette records

12 published records for vendor vignette.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

12 records
  • CVE-2018-18941
    40Plan

    In Vignette Content Management version 6, it is possible to gain remote access to administrator privileges by discovering the admin password

    CriticalCVSS 9.8No exploitEPSS 2%

    vignette · content managementJan 31, 2019

  • CVE-2003-0398
    31Monitor

    Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, with the SSI EXEC feature enabled, allows remote attackers to execute arbitrary code

    HighCVSS 7.5No exploitEPSS 2%

    vignette · content suiteJul 2, 2003

  • CVE-2003-0403
    31Monitor

    Vignette StoryServer 5 and Vignette V/5 allows remote attackers to read and modify license information, and cause a denial of service (servi

    HighCVSS 7.5No exploitEPSS 2%

    vignette · content suiteJun 30, 2003

  • CVE-2008-6412
    30Monitor

    Unspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4, and 7.5 allows "low privileged" users to gain adminis

    HighCVSS 7.5No exploitEPSS 1%

    vignette · vignette content managementMar 6, 2009

  • CVE-2003-0399
    25Monitor

    Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by se

    MediumCVSS 6.4No exploitEPSS 1%

    vignette · content suiteJul 2, 2003

  • CVE-2003-0400
    21Monitor

    Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized p

    MediumCVSS 5.0Proof of conceptEPSS 3%

    vignette · content suiteJun 30, 2003

  • CVE-2003-0401
    21Monitor

    Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template.

    MediumCVSS 5.0No exploitEPSS 2%

    vignette · content suiteJun 30, 2003

  • CVE-2004-0917
    20Monitor

    The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows re

    MediumCVSS 5.0No exploitEPSS 1%

    vignette · application portalJan 27, 2005

  • CVE-2003-0405
    20Monitor

    Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is proce

    MediumCVSS 5.0No exploitEPSS 1%

    vignette · content suiteJun 30, 2003

  • CVE-2002-0385
    20Monitor

    Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"'

    MediumCVSS 5.0No exploitEPSS 1%

    vignette · storyserverJun 1, 2004

  • CVE-2003-0402
    20Monitor

    The default login template (/vgn/login) in Vignette StoryServer 5 and Vignette V/5 generates different responses whether a user exists or no

    MediumCVSS 5.0No exploitEPSS 1%

    vignette · content suiteJun 30, 2003

  • CVE-2003-0404
    18Monitor

    Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to ins

    MediumCVSS 4.3Proof of conceptEPSS 1%

    vignette · content suiteJun 30, 2003