CVE-2003-0405 - CVE House
Back to Database
Status published Medium CVE-2003-0405

Vignette StoryServer 5 and Vignette V/6 allows remote attackers to...

Vulnerability Description

Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS command, or (2) an HTTP Referrer that is processed in the VALID_PATHS command.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-0405

Credits & Attribution

No credits recorded in the NVD database.

References

More from vignette

View All →
CVE-2018-18941
In Vignette Content Management version 6, it is possible to...
Critical 9.8
CVE-2008-6412
Unspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4,...
High 7.5
CVE-2004-0917
The default installation of Vignette Application Portal installs the diagnostic...
Medium 5
CVE-2003-0404
Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4...
Medium 4.3
CVE-2003-0403
Vignette StoryServer 5 and Vignette V/5 allows remote attackers to...
High 7.5

Affected Vendor

Affected Software

content suite, storyserver, vignette
Vulnerable Versions:
5.0, 6.0, 6.0.1, 6.0.2, 6.0.3

Timeline

Official Publish: June 11th, 2003
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.