cbcvebase.
CVE-2003-0399
published 2003-07-02

CVE-2003-0399: Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds…

PriorityP423medium6.4CVSS 2.0
AVNACLAuNCPIPAN
EPSS
1.57%
72.4th percentile
Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds cookie to an arbitrary value and directly accessing the save template.

Affected

6 ranges
VendorProductVersion rangeFixed in
vignettecontent_suite——
vignettecontent_suite——
vignettestoryserver——
vignettestoryserver——
vignettestoryserver——
vignettevignette——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.