CVE-2002-1315 - CVE House
Back to Database
Status published Medium CVE-2002-1315

Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-1315

Credits & Attribution

No credits recorded in the NVD database.

References

More from iplanet

View All →
CVE-2003-1587
Cross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to...
Medium 5
CVE-2003-1586
Cross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to...
Medium 4.3
CVE-2002-1655
The Web Publishing feature in Netscape Enterprise Server 3.x and...
Medium 5
CVE-2002-1654
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0...
High 7.5
CVE-2002-1316
importInfo in the Admin Server for iPlanet WebServer 4.x, up...
Medium 6.8

Affected Vendor

Affected Software

iplanet web server
Vulnerable Versions:
4.1, 4.1_sp1, 4.1_sp2, 4.1_sp3, 4.1_sp4, 4.1_sp5, 4.1_sp6, 4.1_sp7, 4.1_sp8, 4.1_sp9, 4.1_sp10, 4.1_sp11

Timeline

Official Publish: November 21st, 2002
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.