CVE-2007-6572

Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566204.

Link	Resource
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1	Patch
http://www.securityfocus.com/bid/26978	Patch
http://secunia.com/advisories/28216
http://www.vupen.com/english/advisories/2007/4313
https://exchange.xforce.ibmcloud.com/vulnerabilities/43978

Configuration 1

cpe:2.3:a:sun:java_system_web_server:6.0:sp9:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.1:sp1:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp1:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.1:sp6:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.0:sp1:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:4.0:sp1:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp6:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:4.0.2:*:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.0:sp10:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.0:*:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp9:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp2:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.1:sp3:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.0:sp4:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.0:sp6:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp5:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.0:sp2:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp8:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.1:*:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.0:sp7:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.1:sp4:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp7:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:4.0:*:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:4.0.4:*:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:4.0.5:*:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.1:sp5:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp4:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:7.0:*:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp3:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.0:sp8:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.0:sp3:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:3.6:*:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.0:sp5:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp10:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.1:sp2:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_server:6.1:sp7:*:*:*:*:*:* cpe:2.3:a:sun:java_system_web_proxy_server:4.0.3:*:*:*:*:*:*:*

---

Published : 2007-12-28 09:46

Updated : 2017-08-08 01:29

---

NVD link : CVE-2007-6572

Mitre link : CVE-2007-6572

No products.

CWE-79