CVEvulnerability
CVE-2007-6571
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6611356.
Affected configurations
• sun java system web proxy server 3.6
• sun java system web proxy server 4.0
• sun java system web proxy server 4.0.2
• sun java system web proxy server 4.0.3
• sun java system web proxy server 4.0.4
• sun java system web proxy server 4.0.5
• sun java system web server 6.0
• sun java system web server 6.1
• sun java system web server 7.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/28216 secunia.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1 sunsolve.sun.com
- http://www.securityfocus.com/bid/26978 Patch
- http://www.vupen.com/english/advisories/2007/4313 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43977 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/28216 secunia.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1 sunsolve.sun.com
- http://www.securityfocus.com/bid/26978 Patch
- http://www.vupen.com/english/advisories/2007/4313 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43977 exchange.xforce.ibmcloud.com