IW
Product
Iplanet Web Server
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 2Low 0
Watch
Add Iplanet Web Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-7182 | 9.8 | Nov 5 | Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR… Affected: 7.0 |
| CVE-2016-1950 | 8.8 | Mar 13 | Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR… Affected: 7.0 |
| CVE-2020-9315 | 7.5 | May 10 | ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by… Affected: 7.0 through 7.0.27 |
| CVE-2017-10055 | 6.1 | Oct 19 | Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware (subcomponent: Admin Graphical User Interface) Affected: 7.0 |
| CVE-2020-9314 | 4.8 | May 10 | ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI Affected: 7.0 through 7.0.27 |
| CVE-2013-1620 | – | Feb 8 | The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the… Affected: 6.1; 7.0 |
| CVE-2012-1738 | – | Jul 17 | Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0 allows remote… Affected: 7.0 |
Showing 7