📦

iplanet_web_server

Vendor: iplanet

Actively Exploited 0 CISA KEV List
PoC / Exploits 3 Code Available
Total RCEs 0 Remote Access
Total CVEs 28 Total Indexed
Avg. EPSS 7.18% Exploit Prob.
Latest CVE CVE-2020-9315 May 10

Security Vulnerability Index

Page 3 / 3
5.0 CVSS

iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server.

EPSS: 3.12%
5.0 CVSS

Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corrupt data.

EPSS: 0.97%
10.0 CVSS

Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.

EPSS: 3.13%
5.0 CVSS

iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.

EPSS: 1.96%