Unscored severity · published Jun 30, 2003
CVE-2003-0413
Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java System Web Server 6.1…
–
CVSS
6.7%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java System Web Server 6.1 allows remote attackers to insert arbitrary web script or HTML via an HTTP request that generates an "Invalid JSP file" error, which inserts the text in the resulting error message.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.7% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OA
One Application Server · Sun
7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0413
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0413
marc.info
http://marc.info/?l=bugtraq&m=105409846029475&w=2
Patch
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity
sunsolve.sun.com
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57605
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201009-1
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
Patch
http://www.ciac.org/ciac/bulletins/n-103.shtml
More from One Application Server
–
CVE-2006-6276
HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows…
–
CVE-2006-5654
Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3, when SSLv2 is…
–
CVE-2006-3225
Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application…
–
CVE-2006-2501
Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard…
–
CVE-2005-4046
Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun…