Vendor archive

orionserver CVEs

Beta · best-effort

3 CVEs tagged to vendor orionserver — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2006-0816

Published Mar 24, 2006

Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (dot) and (2) space characters in the exte…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2005-2981

Published Sep 20, 2005

Cross-site scripting (XSS) vulnerability in Orion 1.3.8 and 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the r…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2002-1859

Published Dec 31, 2002

Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration info…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1