CVEvulnerability
CVE-2007-6570
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309.
Affected configurations
• sun java system web proxy server 3.6
• sun java system web proxy server 4.0
• sun java system web proxy server 4.0.2
• sun java system web proxy server 4.0.3
• sun java system web proxy server 4.0.4
• sun java system web proxy server 4.0.5
• sun java system web server 6.0
• sun java system web server 6.1
• sun java system web server 7.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view docs.sun.com
- http://docs.sun.com/source/820-3637-10/relnotes36sp11_unix.html#wp19247 docs.sun.com
- http://osvdb.org/40851 osvdb.org
- http://secunia.com/advisories/28186 Patch, Vendor Advisory
- http://secunia.com/advisories/28216 secunia.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1 sunsolve.sun.com
- http://www.securityfocus.com/bid/26978 Patch
- http://www.vupen.com/english/advisories/2007/4313 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43976 exchange.xforce.ibmcloud.com
- http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view docs.sun.com
- http://docs.sun.com/source/820-3637-10/relnotes36sp11_unix.html#wp19247 docs.sun.com
- http://osvdb.org/40851 osvdb.org
- http://secunia.com/advisories/28186 Patch, Vendor Advisory
- http://secunia.com/advisories/28216 secunia.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1 sunsolve.sun.com
- http://www.securityfocus.com/bid/26978 Patch
- http://www.vupen.com/english/advisories/2007/4313 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43976 exchange.xforce.ibmcloud.com