| Max CVSS | 6.8 | Min CVSS | 4.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-9315 | 5.0 |
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE: a related support
|
21-07-2021 - 11:39 | 10-05-2020 - 23:15 | |
| CVE-2020-9314 | 4.9 |
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists because of an incomplete fix for CVE-2012-0516. NOTE
|
21-07-2021 - 11:39 | 10-05-2020 - 23:15 | |
| CVE-2012-0516 | 6.8 |
Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration Console.
|
13-12-2017 - 02:29 | 03-05-2012 - 17:55 |