Description
Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246.
References (6)
Core 6
Core References
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/26978
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28216
Patch vendor-advisory
x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1
Patch third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28186
Various Sources x_refsource_confirm
http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/4313
Scores
EPSS
0.0056
EPSS Percentile
68.7%
Details
CWE
CWE-79
Status
published
Products (4)
sun/java_system_web_proxy_server
3.6 (4 CPE variants)
sun/java_system_web_proxy_server
< 4.0.6 (5 CPE variants)
sun/java_system_web_server
6.1 (6 CPE variants)
sun/java_system_web_server
7.0 (5 CPE variants)
Published
Dec 28, 2007
Tracked Since
Feb 18, 2026