CVE-2002-1315
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to...
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).
- Record
CVE-2002-1315- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).
- Record
CVE-2002-1315- Updated
- 2026-11-02
EUVDEUVD-2002-1299 No score
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).
- Record
EUVD-2002-1299- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6j9f-c956-rhqf No score
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to...
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).
- Record
GHSA-6j9f-c956-rhqf- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1315 is a medium vulnerability (CVSS 6.8) in Iplanet Web Server, published November 21, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.64%, the 76th percentile. No source names a fixed version.
References
sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1
iss.net/security_center/static/10692.php
ngsec.com/docs/advisories/NGSEC-2002-4.txt
securityfocus.com/bid/6202
archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html
marc.info?l=bugtraq&m=103772308030269&w=2
nvd.nist.gov/vuln/detail/CVE-2002-1315
github.com/advisories/GHSA-6j9f-c956-rhqf