Iplanet Web Server
Vendor:
First CVE: Jul 17, 2012 · Active for 14 years
7
Total CVEs
More Total CVEs than 83% of tracked products
1.2
Avg CVEs / Year
Higher CVE frequency than 55% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 33% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Iplanet Web Server over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 17, 2012
14 years ago
Most Recent CVE
May 10, 2020
2,266 days ago
CVE Severity & Scoring
Iplanet Web Server7 CVEs
57%
29%
14%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network5 (71.4%)
Unknown2 (28.6%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (71.4%)
High0 (0.0%)
Unknown2 (28.6%)
User Interaction
None2 (28.6%)
Unknown2 (28.6%)
Required3 (42.9%)
Privileges Required
Low0 (0.0%)
High1 (14.3%)
None4 (57.1%)
Unknown2 (28.6%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-9315HIGH ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by u | May 10, 2020 | 7.5 | 79 | NO | YES |
CVE-2016-1950HIGH Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38 | Mar 13, 2016 | 8.8 | 30 | NO | NO |
CVE-2015-7182CRITICAL Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR | Nov 5, 2015 | 9.8 | 28 | NO | NO |
CVE-2020-9314MEDIUM ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. | May 10, 2020 | 4.8 | 24 | NO | YES |
CVE-2017-10055MEDIUM Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware (subcomponent: Admin Graphical User Interface). The supported version that is affected is 7.0. | Oct 19, 2017 | 6.1 | 18 | NO | NO |
CVE-2012-1738MEDIUM Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0 allows remote attacke | Jul 17, 2012 | 5.0 | 18 | NO | NO |
CVE-2013-1620MEDIUM The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing | Feb 8, 2013 | 4.3 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
2 CVEs
28.6% of CVEs· 98th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Iplanet Web Server
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 7.0 | 5 | 6.8 | 4.5% | 0 | 0 |
| 6.1 | 1 | 4.3 | 3.7% | 0 | 0 |