cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2020-9314,https://securityvulnerability.io/vulnerability/CVE-2020-9314,,** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists because of an incomplete fix for CVE-2012-0516. NOTE: a related support policy can be found in the www.oracle.com references attached to this CVE.,Oracle,Iplanet Web Server,4.8,MEDIUM,0.009870000183582306,false,false,false,false,,false,false,2020-05-10T23:15:00.000Z,0
CVE-2020-9315,https://securityvulnerability.io/vulnerability/CVE-2020-9315,,"** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE: a related support policy can be found in the www.oracle.com references attached to this CVE.",Oracle,Iplanet Web Server,7.5,HIGH,0.9689499735832214,false,false,false,false,,false,false,2020-05-10T23:15:00.000Z,0
CVE-2017-10055,https://securityvulnerability.io/vulnerability/CVE-2017-10055,,"Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware (subcomponent: Admin Graphical User Interface). The supported version that is affected is 7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iPlanet Web Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iPlanet Web Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iPlanet Web Server accessible data as well as unauthorized read access to a subset of Oracle iPlanet Web Server accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).",Oracle,Iplanet Web Server,6.1,MEDIUM,0.001290000043809414,false,false,false,false,,false,false,2017-10-19T17:00:00.000Z,0
CVE-2012-1738,https://securityvulnerability.io/vulnerability/CVE-2012-1738,,Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0 allows remote attackers to affect availability via unknown vectors related to Web Server.,Oracle,"Iplanet Web Server,Sun Products Suite Java System Web Server",,,0.012729999609291553,false,false,false,false,,false,false,2012-07-17T22:00:00.000Z,0
CVE-2004-2763,https://securityvulnerability.io/vulnerability/CVE-2004-2763,,"The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.",Oracle,"One Web Server,Iplanet Web Server",,,0.00430000014603138,false,false,false,false,,false,false,2009-06-01T22:30:00.000Z,0
CVE-2007-0183,https://securityvulnerability.io/vulnerability/CVE-2007-0183,,Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the NS-max-records parameter.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.,Oracle,Iplanet Web Server,,,0.007329999934881926,false,false,false,false,,false,false,2007-01-12T05:04:00.000Z,0
CVE-2002-1042,https://securityvulnerability.io/vulnerability/CVE-2002-1042,,"Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.",Oracle,"One Web Server,One Application Server,Iplanet Web Server,Enterprise Server",,,0.059790000319480896,false,false,false,false,,false,false,2002-10-04T04:00:00.000Z,0