Orionserver Orion Application Server
3 CVEs affecting Orionserver Orion Application Server. Latest disclosed: 2006-03-24. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2006-0816 | | 2006-03-24 | Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (dot) and (2) space ch… | |
CVE-2005-2981 | | 2005-09-20 | Cross-site scripting (XSS) vulnerability in Orion 1.3.8 and 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not prop… | |
CVE-2002-1859 | | 2002-12-31 | Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files an… |