CVE-2002-1315: iplanet iplanet_web_server
Vulnerability summary
CVE-2002-1315 is a medium (CVSS 6.8) vulnerability in iplanet iplanet_web_server. EPSS estimates a 1.64% chance of exploitation in the next 30 days, higher than 76% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 21-11-2002PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.64%
Chance of exploitation in the next 30 days
Percentile
76%
Versus all other CVEs
30-day change
0.00 pp
From 1.64% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (iss.net)
Maturity: unknown
Exploit Reference (ngsec.com)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Iplanet1 product
- iplanet_web_server4.1 | 4.1_sp1 | 4.1_sp2 | 4.1_sp3 | 4.1_sp4 | 4.1_sp5 | 4.1_sp6 | 4.1_sp7 | 4.1_sp8 | 4.1_sp9 | 4.1_sp10 | 4.1_sp11
1 vendor · 1 product
References
6 links- archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.htmlMailing ListX Refsource VULNWATCHExploitVendor Advisory