CVEvulnerability
CVE-2007-6569
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246.
Affected configurations
• sun java system web proxy server (<= 4.0.6)
• sun java system web proxy server 3.6
• sun java system web server 6.1
• sun java system web server 7.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view docs.sun.com
- http://secunia.com/advisories/28186 Patch
- http://secunia.com/advisories/28216 secunia.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1 Patch
- http://www.securityfocus.com/bid/26978 Patch
- http://www.vupen.com/english/advisories/2007/4313 www.vupen.com
- http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view docs.sun.com
- http://secunia.com/advisories/28186 Patch
- http://secunia.com/advisories/28216 secunia.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1 Patch
- http://www.securityfocus.com/bid/26978 Patch
- http://www.vupen.com/english/advisories/2007/4313 www.vupen.com