4.3

CVE-2007-6572

Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566204.

Data is provided by the National Vulnerability Database (NVD)
Sun ≫ Java System Web Proxy Server Version3.6 Updatesp1
Sun ≫ Java System Web Proxy Server Version3.6 Updatesp10
Sun ≫ Java System Web Proxy Server Version3.6 Updatesp2
Sun ≫ Java System Web Proxy Server Version3.6 Updatesp3
Sun ≫ Java System Web Proxy Server Version3.6 Updatesp4
Sun ≫ Java System Web Proxy Server Version3.6 Updatesp5
Sun ≫ Java System Web Proxy Server Version3.6 Updatesp6
Sun ≫ Java System Web Proxy Server Version3.6 Updatesp7
Sun ≫ Java System Web Proxy Server Version3.6 Updatesp8
Sun ≫ Java System Web Proxy Server Version3.6 Updatesp9
Sun ≫ Java System Web Proxy Server Version4.0 Updatesp1
Sun ≫ Java System Web Server Version6.0
Sun ≫ Java System Web Server Version6.0 Updatesp1
Sun ≫ Java System Web Server Version6.0 Updatesp10
Sun ≫ Java System Web Server Version6.0 Updatesp2
Sun ≫ Java System Web Server Version6.0 Updatesp3
Sun ≫ Java System Web Server Version6.0 Updatesp4
Sun ≫ Java System Web Server Version6.0 Updatesp5
Sun ≫ Java System Web Server Version6.0 Updatesp6
Sun ≫ Java System Web Server Version6.0 Updatesp7
Sun ≫ Java System Web Server Version6.0 Updatesp8
Sun ≫ Java System Web Server Version6.0 Updatesp9
Sun ≫ Java System Web Server Version6.1
Sun ≫ Java System Web Server Version6.1 Updatesp1
Sun ≫ Java System Web Server Version6.1 Updatesp2
Sun ≫ Java System Web Server Version6.1 Updatesp3
Sun ≫ Java System Web Server Version6.1 Updatesp4
Sun ≫ Java System Web Server Version6.1 Updatesp5
Sun ≫ Java System Web Server Version6.1 Updatesp6
Sun ≫ Java System Web Server Version6.1 Updatesp7
Sun ≫ Java System Web Server Version7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.29% 0.496
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.