CVE-2002-1315: XSS
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1315?
CVE-2002-1315 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.
How do I fix CVE-2002-1315?
To mitigate CVE-2002-1315, upgrade to a patched version of iPlanet Web Server 4.x or apply any available security updates.
What systems are affected by CVE-2002-1315?
CVE-2002-1315 affects iPlanet Web Server versions 4.1 up to SP11, including SP1 through SP10.
What impact does CVE-2002-1315 have on security?
CVE-2002-1315 can allow remote attackers to execute arbitrary scripts in the context of the iPlanet administration interface.
Can CVE-2002-1315 lead to privilege escalation?
Yes, CVE-2002-1315 may enable privilege escalation if exploited successfully through the XSS vulnerability.