« Back to list

CVE-2003-0404

Status: ModifiedMedium (4.3)—

Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (3)

Vignette — Content SuiteVignette — StoryserverVignette — Vignette

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2003-0404",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2003-06-30T04:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=105406028027360&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/12071.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.s21sec.com/es/avisos/s21sec-023-en.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/7687",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=105406028027360&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/12071.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.s21sec.com/es/avisos/s21sec-023-en.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/7687",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template."
    },
    {
      "lang": "es",
      "value": "Multiples de vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Vignette StoryServer 4 y 5, y Vignette V/5 y V/6, permite a atacantes remotos insertar HTML arbitrario y script mediante variables de texto, como se ha demostrado usanod el parámetro errinfo de la plantilla de inicio de sesión por defecto."
    }
  ],
  "lastModified": "2026-06-16T22:02:08.463",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vignette:content_suite:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "240B7293-825A-4224-B767-D79FF7D90AA1"
            },
            {
              "criteria": "cpe:2.3:a:vignette:content_suite:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "460D6CDD-85AF-4E27-ABFB-3BF603B0EDCD"
            },
            {
              "criteria": "cpe:2.3:a:vignette:content_suite:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F28F678-7536-484A-A970-068392362B55"
            },
            {
              "criteria": "cpe:2.3:a:vignette:storyserver:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "331AD9B5-7E79-45CA-AFE1-84B1545FE74A"
            },
            {
              "criteria": "cpe:2.3:a:vignette:storyserver:4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A69859D5-F4AF-4239-ADB2-5AB3F6A3F25F"
            },
            {
              "criteria": "cpe:2.3:a:vignette:storyserver:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1113CE36-9F16-443E-B4B6-C9EA21DEF362"
            },
            {
              "criteria": "cpe:2.3:a:vignette:vignette:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D1E15D6-2CA5-419C-80AD-9E8FE6A054C3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}