CVE-2003-0405

MEDIUM · CVSS 5 EPSS 1.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2003-06-30 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2003-0405

Severity

MEDIUM

CVSS

EPSS

1.57%

Original Filing — NVD Description

Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS command, or (2) an HTTP Referrer that is processed in the VALID_PATHS command.