CVE-2002-1315
Severity Score
6.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
4
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).
Vulnerabilidad de scripting en sitios cruzados (XSS) en el Servidor de Administración de iPlanet WebServer 4.x, hasta SP11, permite a usuarios remotos ejecutar scripts web o HTML como el adminstrador de iPlanet mediante la inyección del script deseado en los registros de errores, y posiblemente ganar más privilegios usando la vulnerabilidad XSS junto con otro problema (CAN-2002-1316)
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2002-11-20 CVE Reserved
- 2002-11-21 CVE Published
- 2024-03-31 EPSS Updated
- 2024-08-08 CVE Updated
- 2024-08-08 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://marc.info/?l=bugtraq&m=103772308030269&w=2 | Mailing List |
| URL | Date | SRC |
|---|---|---|
| http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html | 2024-08-08 | |
| http://www.iss.net/security_center/static/10692.php | 2024-08-08 | |
| http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt | 2024-08-08 | |
| http://www.securityfocus.com/bid/6202 | 2024-08-08 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1 | 2016-10-18 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Iplanet Search vendor "Iplanet" | Iplanet Web Server Search vendor "Iplanet" for product "Iplanet Web Server" | 4.1 Search vendor "Iplanet" for product "Iplanet Web Server" and version "4.1" | - |
Affected
| ||||||
| Iplanet Search vendor "Iplanet" | Iplanet Web Server Search vendor "Iplanet" for product "Iplanet Web Server" | 4.1_sp1 Search vendor "Iplanet" for product "Iplanet Web Server" and version "4.1_sp1" | - |
Affected
| ||||||
| Iplanet Search vendor "Iplanet" | Iplanet Web Server Search vendor "Iplanet" for product "Iplanet Web Server" | 4.1_sp2 Search vendor "Iplanet" for product "Iplanet Web Server" and version "4.1_sp2" | - |
Affected
| ||||||
| Iplanet Search vendor "Iplanet" | Iplanet Web Server Search vendor "Iplanet" for product "Iplanet Web Server" | 4.1_sp3 Search vendor "Iplanet" for product "Iplanet Web Server" and version "4.1_sp3" | - |
Affected
| ||||||
| Iplanet Search vendor "Iplanet" | Iplanet Web Server Search vendor "Iplanet" for product "Iplanet Web Server" | 4.1_sp4 Search vendor "Iplanet" for product "Iplanet Web Server" and version "4.1_sp4" | - |
Affected
| ||||||
| Iplanet Search vendor "Iplanet" | Iplanet Web Server Search vendor "Iplanet" for product "Iplanet Web Server" | 4.1_sp5 Search vendor "Iplanet" for product "Iplanet Web Server" and version "4.1_sp5" | - |
Affected
| ||||||
| Iplanet Search vendor "Iplanet" | Iplanet Web Server Search vendor "Iplanet" for product "Iplanet Web Server" | 4.1_sp6 Search vendor "Iplanet" for product "Iplanet Web Server" and version "4.1_sp6" | - |
Affected
| ||||||
| Iplanet Search vendor "Iplanet" | Iplanet Web Server Search vendor "Iplanet" for product "Iplanet Web Server" | 4.1_sp7 Search vendor "Iplanet" for product "Iplanet Web Server" and version "4.1_sp7" | - |
Affected
| ||||||
| Iplanet Search vendor "Iplanet" | Iplanet Web Server Search vendor "Iplanet" for product "Iplanet Web Server" | 4.1_sp8 Search vendor "Iplanet" for product "Iplanet Web Server" and version "4.1_sp8" | - |
Affected
| ||||||
| Iplanet Search vendor "Iplanet" | Iplanet Web Server Search vendor "Iplanet" for product "Iplanet Web Server" | 4.1_sp9 Search vendor "Iplanet" for product "Iplanet Web Server" and version "4.1_sp9" | - |
Affected
| ||||||
| Iplanet Search vendor "Iplanet" | Iplanet Web Server Search vendor "Iplanet" for product "Iplanet Web Server" | 4.1_sp10 Search vendor "Iplanet" for product "Iplanet Web Server" and version "4.1_sp10" | - |
Affected
| ||||||
| Iplanet Search vendor "Iplanet" | Iplanet Web Server Search vendor "Iplanet" for product "Iplanet Web Server" | 4.1_sp11 Search vendor "Iplanet" for product "Iplanet Web Server" and version "4.1_sp11" | - |
Affected
| ||||||