Vulnerabilities (CVE)

Filtered by vendor Netscape Subscribe
Filtered by product Enterprise Server
Total 24 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0479 2 Hp, Netscape 2 Hp-ux, Enterprise Server 2025-04-03 5.0 MEDIUM N/A
Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.
CVE-1999-0045 2 Apache, Netscape 4 Http Server, Commerce Server, Communications Server and 1 more 2025-04-03 7.5 HIGH N/A
List of arbitrary files on Web host via nph-test-cgi script.
CVE-2000-0237 1 Netscape 1 Enterprise Server 2025-04-03 6.4 MEDIUM N/A
Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories.
CVE-2018-18940 1 Netscape 1 Enterprise Server 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
servlet/SnoopServlet (a servlet installed by default) in Netscape Enterprise 3.63 has reflected XSS via an arbitrary parameter=[XSS] in the query string. A remote unauthenticated attacker could potentially exploit this vulnerability to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser. NOTE: this product is discontinued.