cbcvebase.
CVE-2003-0398
published 2003-07-02

CVE-2003-0398: Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, with the SSI EXEC feature enabled, allows remote attackers to execute arbitrary code via a text…

PriorityP430high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.91%
85.3th percentile
Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, with the SSI EXEC feature enabled, allows remote attackers to execute arbitrary code via a text variable to a Vignette Application that is later displayed.

Affected

6 ranges
VendorProductVersion rangeFixed in
vignettecontent_suite
vignettecontent_suite
vignettestoryserver
vignettestoryserver
vignettestoryserver
vignettevignette
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.