Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sun java vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2007-2904
Cross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.0 up to and including 6.3, when Internet Explorer is used, allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, possibly a related issue to CVE-2006-5653.
Sun Java System Messaging Server 6.0
Sun Java System Messaging Server 6.1
Sun Java System Messaging Server 6.2
Sun Java System Messaging Server 6.3
4.3
CVSSv2
CVE-2007-0628
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 (6.3), and 7 2005Q4 (7.0) prior to 20070129 allow remote malicious users to inject arbitrary web script or HTML via the (1) goto or (2) gx-charset parameter. NOTE: some of the...
Sun Java System Access Manager 7.0
Sun Java System Access Manager 6.2
Sun Java System Access Manager 6.3
Sun Java System Access Manager 6.1
10
CVSSv2
CVE-2000-0812
The administration module in Sun Java web server allows remote malicious users to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag.
Sun Java System Web Server 1.1.2
Sun Java System Web Server 1.1.3
Sun Java System Web Server 1.1 Beta
Sun Java System Web Server 2.0
5
CVSSv2
CVE-2009-1074
Sun Java System Identity Manager (IdM) 7.0 up to and including 8.0 does not use SSL in all expected circumstances, which makes it easier for remote malicious users to obtain sensitive information by sniffing the network, related to "ssl termination devices" and lack of ...
Sun Java System Identity Manager 7.0
Sun Java System Identity Manager 7.1
Sun Java System Identity Manager 8.0
Sun Java System Identity Manager 7.1.1
5
CVSSv2
CVE-2009-1075
Sun Java System Identity Manager (IdM) 7.0 up to and including 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account exists, which allows remote malicious users to enumerate valid usernames.
Sun Java System Identity Manager 7.1.1
Sun Java System Identity Manager 8.0
Sun Java System Identity Manager 7.1
Sun Java System Identity Manager 7.0
5
CVSSv2
CVE-2009-1076
Sun Java System Identity Manager (IdM) 7.0 up to and including 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists, which allows remote malicious users to enumerate valid usernames.
Sun Java System Identity Manager 7.0
Sun Java System Identity Manager 7.1
Sun Java System Identity Manager 7.1.1
Sun Java System Identity Manager 8.0
4
CVSSv2
CVE-2009-1078
Sun Java System Identity Manager (IdM) 7.0 up to and including 8.0 does not enforce the expected privilege requirements for (1) deleting audit policies and (2) modifying workflows, which allows remote authenticated users to have an unspecified impact.
Sun Java System Identity Manager 7.0
Sun Java System Identity Manager 7.1.1
Sun Java System Identity Manager 8.0
Sun Java System Identity Manager 7.1
4.3
CVSSv2
CVE-2009-1081
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 up to and including 8.0 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19595 and 19661.
Sun Java System Identity Manager 7.1
Sun Java System Identity Manager 7.1.1
Sun Java System Identity Manager 8.0
Sun Java System Identity Manager 7.0
9
CVSSv2
CVE-2009-1083
Sun Java System Identity Manager (IdM) 7.0 up to and including 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accounts, which allows remote malicious users to execute arbitrary commands via vectors involving "resource ad...
Sun Java System Identity Manager 7.1.1
Sun Java System Identity Manager 7.0
Sun Java System Identity Manager 7.1
Sun Java System Identity Manager 8.0
7.8
CVSSv2
CVE-2009-0609
Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 up to and including 6.3, when a JDBC data source is used, does not properly handle (1) a long value in an ADD or (2) long string attributes, which allows remote malicious users to ca...
Sun Java System Directory Server 6.1
Sun Java System Directory Server 6.2
Sun Java System Directory Server 6.3
Sun Java System Directory Server 6.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
bypass
open redirect
CVE-2024-4358
CVE-2024-24199
CVE-2024-5550
CVE-2024-5305
CVE-2024-30373
CVE-2024-1800
deserialization
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »