Login Request a demo
Unscored severity · published Mar 19, 2007
CVE-2007-1504
Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0.2 and earlier allows remote attackers to inject arbitrary…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving web.xml and HTTP 404 and 500 status codes.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
Interstage Application Server · Fujitsu
3.0; 3.0; 4.0; 4.0; 4.0; 5.0; +13 more · source: NVD
IA
Interstage Apworks · Fujitsu
6.0 · source: NVD
Affected product
IA
Interstage Application Server
Fujitsu
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1504
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1504
Third Party Advisory
http://jvn.jp/jp/JVN%2383832818/index.html
Broken Link
http://osvdb.org/34276
Vendor Advisory
http://secunia.com/advisories/24508
Vendor Advisory
http://software.fujitsu.com/jp/security/vulnerabilities/jvn-83832818.html
Vendor Advisory
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200701e.html
Third Party Advisory
http://www.securityfocus.com/bid/23020
More from Interstage Application Server
5.9
CVE-2019-13163
The Fujitsu TLS library allows a man-in-the-middle attack
–
CVE-2013-7105
Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio…
–
CVE-2010-1942
Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage…
–
CVE-2008-7195
Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Edition 7.0.1 for Solaris, allows attackers to cause a denial of…
–
CVE-2008-7194
Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, and 8.0.0 for Windows, allows attackers to cause a denial of…