4.3

CVE-2009-1934

Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allows remote attackers to inject arbitrary web script or HTML via the query string in situations that result in a 502 Gateway error.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Java System Web Server Version 6.1 Update sp10 Edition aix
Sun ≫ Java System Web Server Version 6.1 Update sp4 Edition aix
Sun ≫ Java System Web Server Version 6.1 Update sp5 Edition aix
Sun ≫ Java System Web Server Version 6.1 Update sp6 Edition aix
Sun ≫ Java System Web Server Version 6.1 Update sp7 Edition aix
Sun ≫ Java System Web Server Version 6.1 Update sp8 Edition aix
Sun ≫ Java System Web Server Version 6.1 Update sp9 Edition aix
Sun ≫ One Web Server Version 6.1 Edition aix
Sun ≫ One Web Server Version 6.1 Update sp1 Edition aix
Sun ≫ One Web Server Version 6.1 Update sp2 Edition aix
Sun ≫ One Web Server Version 6.1 Update sp3 Edition aix
Sun ≫ Java System Web Server Version 6.1 Update sp10 Edition hp_ux
Sun ≫ Java System Web Server Version 6.1 Update sp4 Edition hp_ux
Sun ≫ Java System Web Server Version 6.1 Update sp5 Edition hp_ux
Sun ≫ Java System Web Server Version 6.1 Update sp6 Edition hp_ux
Sun ≫ Java System Web Server Version 6.1 Update sp7 Edition hp_ux
Sun ≫ Java System Web Server Version 6.1 Update sp8 Edition hp_ux
Sun ≫ Java System Web Server Version 6.1 Update sp9 Edition hp_ux
Sun ≫ One Web Server Version 6.1 Edition hp_ux
Sun ≫ One Web Server Version 6.1 Update sp1 Edition hp_ux
Sun ≫ One Web Server Version 6.1 Update sp2 Edition hp_ux
Sun ≫ One Web Server Version 6.1 Update sp3 Edition hp_ux
Sun ≫ Java System Web Server Version 6.1 Update sp10 Edition linux
Sun ≫ Java System Web Server Version 6.1 Update sp4 Edition linux
Sun ≫ Java System Web Server Version 6.1 Update sp5 Edition linux
Sun ≫ Java System Web Server Version 6.1 Update sp6 Edition linux
Sun ≫ Java System Web Server Version 6.1 Update sp7 Edition linux
Sun ≫ Java System Web Server Version 6.1 Update sp8 Edition linux
Sun ≫ Java System Web Server Version 6.1 Update sp9 Edition linux
Sun ≫ One Web Server Version 6.1 Edition linux
Sun ≫ One Web Server Version 6.1 Update sp1 Edition linux
Sun ≫ One Web Server Version 6.1 Update sp2 Edition linux
Sun ≫ One Web Server Version 6.1 Update sp3 Edition linux
Sun ≫ Java System Web Server Version 6.1 Update sp10 Edition windows
Sun ≫ Java System Web Server Version 6.1 Update sp4 Edition windows
Sun ≫ Java System Web Server Version 6.1 Update sp5 Edition windows
Sun ≫ Java System Web Server Version 6.1 Update sp6 Edition windows
Sun ≫ Java System Web Server Version 6.1 Update sp7 Edition windows
Sun ≫ Java System Web Server Version 6.1 Update sp8 Edition windows
Sun ≫ Java System Web Server Version 6.1 Update sp9 Edition windows
Sun ≫ One Web Server Version 6.1 Edition windows
Sun ≫ One Web Server Version 6.1 Update sp1 Edition windows
Sun ≫ One Web Server Version 6.1 Update sp2 Edition windows
Sun ≫ One Web Server Version 6.1 Update sp3 Edition windows
Sun ≫ Java System Web Server Version 6.1 Update sp10 Edition sparc
Sun ≫ Java System Web Server Version 6.1 Update sp4 Edition sparc
Sun ≫ Java System Web Server Version 6.1 Update sp5 Edition sparc
Sun ≫ Java System Web Server Version 6.1 Update sp6 Edition sparc
Sun ≫ Java System Web Server Version 6.1 Update sp7 Edition sparc
Sun ≫ Java System Web Server Version 6.1 Update sp8 Edition sparc
Sun ≫ Java System Web Server Version 6.1 Update sp9 Edition sparc
Sun ≫ One Web Server Version 6.1 Edition sparc
Sun ≫ One Web Server Version 6.1 Update sp1 Edition sparc
Sun ≫ One Web Server Version 6.1 Update sp2 Edition sparc
Sun ≫ One Web Server Version 6.1 Update sp3 Edition sparc
Sun ≫ Java System Web Server Version 6.1 Update sp10 Edition x86
Sun ≫ Java System Web Server Version 6.1 Update sp4 Edition x86
Sun ≫ Java System Web Server Version 6.1 Update sp48 Edition x86
Sun ≫ Java System Web Server Version 6.1 Update sp5 Edition x86
Sun ≫ Java System Web Server Version 6.1 Update sp6 Edition x86
Sun ≫ Java System Web Server Version 6.1 Update sp7 Edition x86
Sun ≫ Java System Web Server Version 6.1 Update sp9 Edition x86
Sun ≫ One Web Server Version 6.1 Edition x86
Sun ≫ One Web Server Version 6.1 Update sp1 Edition x86
Sun ≫ One Web Server Version 6.1 Update sp2 Edition x86
Sun ≫ One Web Server Version 6.1 Update sp3 Edition x86
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.24% 0.805
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://osvdb.org/54872
http://secunia.com/advisories/35338
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-116648-23-1
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-259588-1
Patch
Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2009-211.htm
http://www.securityfocus.com/bid/35204
http://www.securitytracker.com/id?1022334
http://www.vupen.com/english/advisories/2009/1500
https://exchange.xforce.ibmcloud.com/vulnerabilities/50951