Vulnerabilities (CVE)

Filtered by vendor Netscape Subscribe
Filtered by product Enterprise Server
Total 24 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0045 2 Apache, Netscape 4 Http Server, Commerce Server, Communications Server and 1 more 2024-11-20 7.5 HIGH N/A
List of arbitrary files on Web host via nph-test-cgi script.
CVE-1999-0012 2 Microsoft, Netscape 5 Frontpage, Internet Information Server, Personal Web Server and 2 more 2024-11-20 5.0 MEDIUM N/A
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
CVE-1999-0007 5 C2net, Hp, Microsoft and 2 more 13 Stonghold Web Server, Open Market Secure Webserver, Exchange Server and 10 more 2024-11-20 5.0 MEDIUM N/A
Information from SSL-encrypted sessions via PKCS #1.
CVE-2018-18940 1 Netscape 1 Enterprise Server 2024-02-28 4.3 MEDIUM 6.1 MEDIUM
servlet/SnoopServlet (a servlet installed by default) in Netscape Enterprise 3.63 has reflected XSS via an arbitrary parameter=[XSS] in the query string. A remote unauthenticated attacker could potentially exploit this vulnerability to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser. NOTE: this product is discontinued.