ST
Product
Storyserver
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Storyserver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2002-0385 | – | Jun 1 | Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"' (double quote) and and '>' characters,… Affected: 4.1; 6.0 |
| CVE-2003-0398 | – | Jul 2 | Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, with the SSI EXEC feature enabled, allows remote attackers to execute arbitrary code via a text variable to a Vignette… Affected: 4.0; 4.1; 5.0 |
| CVE-2003-0399 | – | Jul 2 | Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds cookie to an… Affected: 4.0; 4.1; 5.0 |
| CVE-2003-0403 | – | Jun 30 | Vignette StoryServer 5 and Vignette V/5 allows remote attackers to read and modify license information, and cause a denial of service (service halt) by directly accessing the… Affected: 4.0; 4.1; 5.0 |
| CVE-2003-0400 | – | Jun 30 | Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, as demonstrated… Affected: 4.0; 4.1; 4.2; 5.0 |
| CVE-2003-0405 | – | Jun 30 | Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS command, or (2) an… Affected: 5.0 |
| CVE-2003-0404 | – | Jun 30 | Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text… Affected: 4.0; 4.1; 5.0 |
| CVE-2003-0401 | – | Jun 30 | Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template Affected: 4.0; 4.1; 5.0 |
| CVE-2003-0402 | – | Jun 30 | The default login template (/vgn/login) in Vignette StoryServer 5 and Vignette V/5 generates different responses whether a user exists or not, which allows remote attackers to… Affected: 4.0; 4.1; 5.0 |
Showing 9