Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

java system web server vulnerabilities and exploits

(subscribe to this query)
383
VMScore
CVE-2007-6570
Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x prior to 4.0.6 and 3.x prior to 3.6 SP11 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309.
Sun Java System Web Proxy Server 3.6Sun Java System Web Proxy Server 4.0.2Sun Java System Web Proxy Server 4.0.3Sun Java System Web Server 6.0Sun Java System Web Server 6.1Sun Java System Web Proxy Server 4.0.4Sun Java System Web Proxy Server 4.0.5Sun Java System Web Proxy Server 4.0Sun Java System Web Server 7.0
383
VMScore
CVE-2007-6571
Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6611356.
Sun Java System Web Proxy Server 3.6Sun Java System Web Proxy Server 4.0Sun Java System Web Server 6.0Sun Java System Web Server 6.1Sun Java System Web Server 7.0Sun Java System Web Proxy Server 4.0.4Sun Java System Web Proxy Server 4.0.5Sun Java System Web Proxy Server 4.0.2Sun Java System Web Proxy Server 4.0.3
383
VMScore
CVE-2007-6572
Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566204.
Sun Java System Web Proxy Server 3.6Sun Java System Web Proxy Server 4.0Sun Java System Web Proxy Server 4.0.2Sun Java System Web Server 6.0Sun Java System Web Server 6.1Sun Java System Web Server 7.0Sun Java System Web Proxy Server 4.0.3Sun Java System Web Proxy Server 4.0.4Sun Java System Web Proxy Server 4.0.5
890
VMScore
CVE-2008-4541
Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 up to and including 4.0.7 allows remote malicious users to execute arbitrary code via a crafted HTTP GET request.
Sun Java System Web Proxy Server 4.0Sun Java System Web Proxy Server 4.0.1Sun Java System Web Proxy Server 4.0.3Sun Java System Web Proxy Server 4.0.4Sun Java System Web Proxy Server 4.0.6Sun Java System Web Proxy Server 4.0.5Sun Java System Web Proxy Server 4.0.7Sun Java System Web Proxy Server 4.0.2
890
VMScore
CVE-2000-0812
The administration module in Sun Java web server allows remote malicious users to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag.
Sun Java System Web Server 1.1.2Sun Java System Web Server 1.1.3Sun Java System Web Server 1.1 BetaSun Java System Web Server 2.0
445
VMScore
CVE-2008-3683
Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 up to and including 4.0.5 before SP6 allows remote malicious users to cause a denial of service (failure to accept connections) via unknown vectors, probably related to exhaustion of file descr...
Sun Java System Web Proxy Server 4.0.1Sun Java System Web Proxy Server 4.0.2Sun Java System Web Proxy Server 4.0.4Sun Java System Web Proxy Server 4Sun Java System Web Proxy Server 4.0.3Sun Java System Web Proxy Server 4.0.5
383
VMScore
CVE-2007-6569
Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x prior to 4.0.6 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246.
Sun Java System Web Proxy Server 3.6Sun Java System Web Server 6.1Sun Java System Web Proxy ServerSun Java System Web Server 7.0
605
VMScore
CVE-2006-6276
HTTP request smuggling vulnerability in Sun Java System Proxy Server prior to 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote malicious users to bypass HTTP request filtering, hijack web sessions, perform cross-site scripti...
Sun Java System Web Server 6.0Sun Java System Web Server 6.1Sun Java System Application Server 8.1Sun One Application Server 7.0Sun Java System Web Proxy Server 4.0Sun Java System Web Proxy Server 3.6Sun Java System Application Server 7.0Sun Java System Web Proxy Server -
445
VMScore
CVE-2008-2120
Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote malicious users to obtain source code of JSP files via unknown vectors.
Sun Java System Web Server 7.0Sun Java System Application ServerSun Java System Web Server
445
VMScore
CVE-2004-2216
Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and previous versions and 6.1 SP1 and previous versions, and Application Server 7 Update 4 and previous versions, allows remote malicious users to cause a denial of service (crash) via a malformed client certificate.
Sun Java System Web Server 6.0Sun Java System Application Server 7.0Sun Java System Web Server 6.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook