Iplanet

17 CVEs across 5 Iplanet products. Browse Iplanet vulnerabilities, severities, and proof-of-concept exploits.

Iplanet products with known CVEs

ProductCVEs
Iplanet Web Server13
Calendar Server1
Iplanet Enterprise Server1
Loganpro1
Webexpert1
Iplanet CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2003-15872010-02-05Cross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header.
CVE-2003-15862010-02-05Cross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header.
CVE-2002-16552002-12-31The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-h…
CVE-2002-16542002-12-31iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-…
CVE-2002-13162002-11-29importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in th…
CVE-2002-13152002-11-29Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as th…
CVE-2002-08452002-08-12Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encodi…
CVE-2002-06862002-07-23Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a lon…
CVE-2001-07472001-10-18Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of service and possibl…
CVE-2001-07462001-10-18Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly exe…
CVE-2001-06202001-08-02iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by o…
CVE-2001-04312001-07-02Vulnerability in iPlanet Web Server Enterprise Edition 4.x.
CVE-2001-03272001-07-02iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of ser…
CVE-2001-13682001-06-11Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corrupt data.
CVE-2001-02522001-06-02iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (d…
CVE-2000-10772000-12-11Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a…
CVE-2000-01822000-02-23iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.