CVEvulnerability
CVE-2006-5486
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-10-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages.
Affected configurations
• sun iplanet messaging server 5.2
• sun java system messaging server 6.0
• sun java system messaging server 6.1
• sun java system messaging server 6.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/22575 Vendor Advisory
- http://securitytracker.com/id?1017113 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102497-1 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/20708 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4183 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29806 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/22575 Vendor Advisory
- http://securitytracker.com/id?1017113 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102497-1 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/20708 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4183 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29806 exchange.xforce.ibmcloud.com