CVE-2004-2763

The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote…

published June 1, 2009

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02178 · 82.1th percentile
Published
2009-06-01T22:00Z
EPSS history
Timeline
  • 01 JUN 22:00Z
    The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote…
    cvelistv5