CVE-2007-6570

Sun Java System Web Proxy Server <4.0.6 & <3.6 - XSS

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309.

References (9)

Core 9
Core References
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26978
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28216
Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28186
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43976
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/40851
Various Sources x_refsource_confirm
http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/4313

Scores

EPSS 0.0088
EPSS Percentile 75.6%

Details

CWE
CWE-79
Status published
Products (9)
sun/java_system_web_proxy_server 3.6 (11 CPE variants)
sun/java_system_web_proxy_server 4.0 (2 CPE variants)
sun/java_system_web_proxy_server 4.0.2
sun/java_system_web_proxy_server 4.0.3
sun/java_system_web_proxy_server 4.0.4
sun/java_system_web_proxy_server 4.0.5
sun/java_system_web_server 6.0 (11 CPE variants)
sun/java_system_web_server 6.1 (8 CPE variants)
sun/java_system_web_server 7.0
Published Dec 28, 2007
Tracked Since Feb 18, 2026