Back to Database
Status published
High
CVE-2003-0398
Vignette StoryServer 4 and 5, and Vignette V/5 and V/6,...
Vulnerability Description
Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, with the SSI EXEC feature enabled, allows remote attackers to execute arbitrary code via a text variable to a Vignette Application that is later displayed.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-0398
Credits & Attribution
No credits recorded in the NVD database.
References
More from vignette
View All →CVE-2018-18941
In Vignette Content Management version 6, it is possible to...
Critical
9.8
CVE-2008-6412
Unspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4,...
High
7.5
CVE-2004-0917
The default installation of Vignette Application Portal installs the diagnostic...
Medium
5
CVE-2003-0405
Vignette StoryServer 5 and Vignette V/6 allows remote attackers to...
Medium
5
CVE-2003-0404
Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4...
Medium
4.3
Affected Vendor
vignette
View all reports →Affected Software
content suite, storyserver, vignette
Vulnerable Versions:
6.0, 7.0, 4.0, 4.1, 5.0
Timeline
Official Publish:
June 11th, 2003
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.