CVE-2020-9314

Published: 2020-05-10T23:15Z

Last Modified: 2024-11-21T05:40Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists because of an incomplete fix for CVE-2012-0516. NOTE: a related support policy can be found in the www.oracle.com references attached to this CVE. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt