Iplanet Web Server (Oracle) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2020-05-10. Vendor: Oracle.
CVEs of Iplanet Web Server
- CVE-2020-9315 - CVSS 7.5 (high), 2020-05-10: ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration…
- CVE-2020-9314 - CVSS 4.8 (medium), 2020-05-10: ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc…
- CVE-2017-10055 - CVSS 6.1 (medium), 2017-10-19: Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware (subcomponent: Admin Graphical User Interface). The supported version…
- CVE-2016-1950 - CVSS 8.8 (high), 2016-03-13: Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before…
- CVE-2015-7182 - CVSS 9.8 (critical), 2015-11-05: Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before…
- CVE-2013-1620 - CVSS 4.3 (medium), 2013-02-08: The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation…
- CVE-2012-1738 - CVSS 5 (medium), 2012-07-17: Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0…
