Read the docs

ORION

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ORION records in CISA KEV

No ORION vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Orion Application Server 1 record LOW Woocommerce Products Designer 1 record LOW

Records

1 record in Orion Application Server · all components

TI-2009-04254 CVE-2009-4493 · GHSA-v9xm-gfm5-pq92

Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable…

Priority LOW 33

Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite fil…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06966 Published 2010-01-13 No fix listed CWE-20
Open these records in search →