CVE-2007-0183

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-01-12 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the NS-max-records parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Sun Iplanet Web Server: 4.1, 4.1-sp1, 4.1-sp10, 4.1-sp2, 4.1-sp3, 4.1-sp4 (+5)

References

http://osvdb.org/32662
http://secunia.com/advisories/23605
http://www.securityfocus.com/bid/21977
http://osvdb.org/32662
http://secunia.com/advisories/23605
http://www.securityfocus.com/bid/21977

Get alerted when CVE-2007-0183 or the next vulnerability affects your stack