CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2008-3425
https://notcve.org/view.php?id=CVE-2008-3425
Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors. Vulnerabilidad sin especificar en el Plugin Sun Java System Web Server 7.0 de Sun N1 Service Provisioning System (SPS) 5.2 y 6.0, permite a los usuarios remotos autenticados de SPS obtener acceso administrativo al web server a través de vectores de ataque desconocidos. • http://secunia.com/advisories/31301 http://sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1 http://www.securityfocus.com/bid/30451 http://www.securitytracker.com/id?1020608 http://www.vupen.com/english/advisories/2008/2261/references https://exchange.xforce.ibmcloud.com/vulnerabilities/44114 • CWE-287: Improper Authentication •
CVSS: 4.3EPSS: 0%CPEs: 12EXPL: 0CVE-2008-2518
https://notcve.org/view.php?id=CVE-2008-2518
Cross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search/advanced.jsp) in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el mecanismo de búsqueda avanzada (webapps/search/advanced.jsp) de Sun Java System Web Server 6.1 versiones anteriores a SP9 y 7.0 versiones anteriores a Update 3 permite a atacantes remotos inyectar web script o HTML a través de vectores no especificados, probablemente relacionados al parámetro next. • http://secunia.com/advisories/30381 http://sunsolve.sun.com/search/document.do?assetkey=1-26-236481-1 http://www.securityfocus.com/bid/29355 http://www.securitytracker.com/id?1020110 http://www.vupen.com/english/advisories/2008/1649/references https://exchange.xforce.ibmcloud.com/vulnerabilities/42624 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 11EXPL: 0CVE-2008-2166
https://notcve.org/view.php?id=CVE-2008-2166
Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unknown parameters in index.jsp. Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en el Módulo de búsqueda de Sun Java System Web Server 6.1 anterior a SP9 y 7.0 previo a la Update 2, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de parámetros desconocidos en index.jsp. • http://secunia.com/advisories/30133 http://sunsolve.sun.com/search/document.do?assetkey=1-26-231467-1 http://www.securityfocus.com/bid/29087 http://www.securitytracker.com/id?1019987 http://www.vupen.com/english/advisories/2008/1455/references https://exchange.xforce.ibmcloud.com/vulnerabilities/42263 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.0EPSS: 0%CPEs: 3EXPL: 0CVE-2008-2120
https://notcve.org/view.php?id=CVE-2008-2120
Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to obtain source code of JSP files via unknown vectors. Vulnerabilidad no especificada en Java System Application Server versión 7 2004Q2 anterior a Update 6, Web Server versión 6.1 anterior a SP8 y and Web Server versión 7.0 anterior a Update 1 permite a atacantes remotos obtener el código fuente de los ficheros JSP mediante vectores no conocidos. • http://secunia.com/advisories/30122 http://sunsolve.sun.com/search/document.do?assetkey=1-26-201255-1 http://www.securityfocus.com/bid/29088 http://www.securitytracker.com/id?1019985 http://www.securitytracker.com/id?1019986 http://www.vupen.com/english/advisories/2008/1457/references https://exchange.xforce.ibmcloud.com/vulnerabilities/42266 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 20EXPL: 0CVE-2007-6569
https://notcve.org/view.php?id=CVE-2007-6569
Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la funcionalidad View Error Log (Ver Registro de Errores) en Sun Java System Web Proxy Server 4.x anterior a 4.0.6 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados, también conocido como BugID 6566246. • http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view http://secunia.com/advisories/28186 http://secunia.com/advisories/28216 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1 http://www.securityfocus.com/bid/26978 http://www.vupen.com/english/advisories/2007/4313 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •