CVSS: 5.0EPSS: 10%CPEs: 1EXPL: 0CVE-2007-4511
https://notcve.org/view.php?id=CVE-2007-4511
The Sun Admin Console in Sun Application Server 9.0_0.1 does not apply certain configuration changes persistently, which causes the (1) SSL and (2) SSL_MutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass intended policy. La consola Sun Admin en Sun Application Server 9.0_0.1 no aplica ciertos cambios de configuración persistentes, lo cual provoca que los servicios de escucha (1) SSL y (2) SSL_MutualAuth ORB a habilitados, todos los protocolos y códigos son reiniciados, posiblemente llevandose a cabo ataques remotos evitando las políticas de validación. • http://osvdb.org/45828 http://www.securityfocus.com/archive/1/477315/100/0/threaded http://www.securityfocus.com/bid/25400 https://exchange.xforce.ibmcloud.com/vulnerabilities/36169 •
CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0CVE-2007-4025
https://notcve.org/view.php?id=CVE-2007-4025
Unspecified vulnerability in Sun Java System (SJS) Application Server 8.1 through 9.0 before 20070724 on Windows allows remote attackers to obtain JSP source code via unspecified vectors. Vulnerabilidad sin especificar en el Sun Java System (SJS) Application Server 8.1 hasta la 9.0 anterior al 20070724 bajo Windows, permite a atacantes remotos la obtención de código fuente JSP a través de vectores sin especificar. • http://osvdb.org/37250 http://secunia.com/advisories/26187 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103000-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201537-1 http://www.securityfocus.com/bid/25058 http://www.securitytracker.com/id?1018452 http://www.vupen.com/english/advisories/2007/2647 https://exchange.xforce.ibmcloud.com/vulnerabilities/35579 •
CVSS: 9.3EPSS: 2%CPEs: 21EXPL: 0CVE-2007-3715
https://notcve.org/view.php?id=CVE-2007-3715
Sun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3716. Sun Java System Application Server y Web Server versiones 7.0 hasta 9.0 anterior al 20070710, no procesan apropiadamente las hojas de estilo XSLT en las transformaciones de XSLT en firmas XML, lo que permite a atacantes dependiendo del contexto ejecutar un método Java arbitrario por medio de una hoja de estilo diseñada, un problema relacionado con CVE-2007-3716. • http://osvdb.org/37248 http://secunia.com/advisories/26023 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102992-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200054-1 http://www.isecpartners.com/advisories/2007-04-dsig.txt http://www.isecpartners.com/files/XMLDSIG_Command_Injection.pdf http://www.securityfocus.com/archive/1/473552/100/0/threaded http://www.securityfocus.com/archive/1/473553/100/0/threaded http://www.securityfocus.com/bid/24850 http& • CWE-20: Improper Input Validation •