CVE-2007-0183

Published: Jan 12, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the NS-max-records parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected (21)

Products: Sun: Iplanet Web Server

Sun

1 product

Iplanet Web Server

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Sun Iplanet Web Server	Version 4.1
Sun Iplanet Web Server	Version 4.1 sp10
Sun Iplanet Web Server	Version 4.1 sp10
Sun Iplanet Web Server	Version 4.1 sp1
Sun Iplanet Web Server	Version 4.1 sp1
Sun Iplanet Web Server	Version 4.1 sp2
Sun Iplanet Web Server	Version 4.1 sp2
Sun Iplanet Web Server	Version 4.1 sp3
Sun Iplanet Web Server	Version 4.1 sp3
Sun Iplanet Web Server	Version 4.1 sp4
Sun Iplanet Web Server	Version 4.1 sp4
Sun Iplanet Web Server	Version 4.1 sp5
Sun Iplanet Web Server	Version 4.1 sp5
Sun Iplanet Web Server	Version 4.1 sp6
Sun Iplanet Web Server	Version 4.1 sp6
Sun Iplanet Web Server	Version 4.1 sp7
Sun Iplanet Web Server	Version 4.1 sp7
Sun Iplanet Web Server	Version 4.1 sp8
Sun Iplanet Web Server	Version 4.1 sp8
Sun Iplanet Web Server	Version 4.1 sp9
Sun Iplanet Web Server	Version 4.1 sp9