Unscored severity · published May 30, 2007
CVE-2007-2904
Cross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.0 through 6.3, when Internet Explorer is used, allows remote attackers to inject arbitrary web…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.0 through 6.3, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a related issue to CVE-2006-5653.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Java System Messaging Server · Sun
6.0; 6.1; 6.2; 6.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2904
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2904
osvdb.org
http://osvdb.org/38146
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102909-1
www.securitytracker.com
http://www.securitytracker.com/id?1018106
More from Java System Messaging Server
–
CVE-2008-5098
Cross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a…
–
CVE-2006-5486
Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute…