ES
Product
Enterprise Server
24
CVEs
0
On KEV
7.0
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-1999-0012 | 7.0 | Feb 6 | Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names Affected: 3.0 |
| CVE-2018-18940 | 6.1 | Jan 31 | servlet/SnoopServlet (a servlet installed by default) in Netscape Enterprise 3.63 has reflected XSS via an arbitrary parameter=[XSS] in the query string Affected: 3.63 |
| CVE-2004-0826 | – | Dec 31 | Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2… Affected: 2.0; 2.0.1c; 2.0a; 3.0; 3.0.1; 3.0.1b; +23 more |
| CVE-2002-1655 | – | Dec 31 | The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +1 more |
| CVE-2002-1654 | – | Dec 31 | iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher… Affected: 2.0; 3.0; 3.1; 3.2; 3.3; 3.4; +2 more |
| CVE-2002-1042 | – | Oct 4 | Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote… Affected: 3.6 |
| CVE-2001-0251 | – | Jun 2 | The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command Affected: 3.0 |
| CVE-2001-0250 | – | Jun 2 | The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command Affected: 3.0; 4.0 |
| CVE-2000-0308 | – | Mar 12 | Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges Affected: 2.0 |
| CVE-1999-0758 | – | Mar 12 | Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL Affected: 3.5.1 |
| CVE-2000-0600 | – | Jun 26 | Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL Affected: 4.1.1; 5.0 |
| CVE-2000-0236 | – | Mar 17 | Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump Affected: 3.0; 3.5.1; 3.6 |
| CVE-2000-0237 | – | Mar 11 | Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java… Affected: 3.5; 3.6 |
| CVE-1999-0744 | – | Jan 4 | Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request Affected: All versions, or not specified |
| CVE-1999-1005 | – | Dec 19 | Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a Affected: 3.0.7a |
| CVE-1999-0853 | – | Dec 1 | Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure Affected: 3.5.1; 3.6; 3.6 |
| CVE-1999-0751 | – | Sep 13 | Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch Affected: 3.5.1; 3.6 |
| CVE-1999-1130 | – | Jul 30 | Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by… Affected: through 3.5.1 |
| CVE-1999-0752 | – | Jul 6 | Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake Affected: All versions, or not specified |
| CVE-1999-0686 | – | May 7 | Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL Affected: All versions, or not specified |
| CVE-1999-0479 | – | Mar 1 | Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems Affected: 3.6 |
| CVE-1999-0269 | – | Aug 1 | Netscape Enterprise servers may list files through the PageServices query Affected: All versions, or not specified |
| CVE-1999-0007 | – | Jun 26 | Information from SSL-encrypted sessions via PKCS #1 Affected: 2.0; 3.0.1b; 3.5.1 |
| CVE-1999-0045 | – | Dec 10 | List of arbitrary files on Web host via nph-test-cgi script Affected: 2.0a |
Showing 24