Vulnerabilities

TI-2006-00794 CVE-2006-0816 · GHSA-rp8h-99hh-qgv4

Orion Application Server before 2.0.7, when running on Windows, allows remote attackers…

LOW 28

Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) .

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02573 Published 2006-03-24 No fix listed

TI-2005-02813 CVE-2005-2981 · GHSA-92r2-5h8f-fq8v

Cross-site scripting (XSS) vulnerability in Orion 1.3.8 and 1.4.5 allows remote attackers…

LOW 22

Cross-site scripting (XSS) vulnerability in Orion 1.3.8 and 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting 404 error page.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00947 Published 2005-09-19 No fix listed CWE-79

TI-2002-01778 CVE-2002-1859 · GHSA-h9qj-58xf-q7vq

Orion Application Server 1.5.3, when running on Windows, allows remote attackers to…

LOW 28

Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF dir…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02519 Published 2005-06-28 No fix listed

Vulnerabilities

Filters

Orion Application Server before 2.0.7, when running on Windows, allows remote attackers…

Cross-site scripting (XSS) vulnerability in Orion 1.3.8 and 1.4.5 allows remote attackers…

Orion Application Server 1.5.3, when running on Windows, allows remote attackers to…