← back
CVE-2003-0404

CVE-2003-0404

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.0%
from disclosure to weapon0 days
Published on NVDJun 11
1st PoCMay 26
exploitation probability
2.0%top 21% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.