Unscored severity · published Dec 28, 2007
CVE-2007-6569
Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Java System Web Proxy Server · Sun
through 4.0.6; through 4.0.6; through 4.0.6; through 4.0.6; through 4.0.6; 3.6; +3 more · source: NVD
JS
Java System Web Server · Sun
6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6569
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6569
docs.sun.com
http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view
Patch
http://secunia.com/advisories/28186
secunia.com
http://secunia.com/advisories/28216
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1
Patch
http://www.securityfocus.com/bid/26978
www.vupen.com
http://www.vupen.com/english/advisories/2007/4313
More from Java System Web Proxy Server
–
CVE-2008-4541
Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET…
–
CVE-2008-3683
Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service (failure to…
–
CVE-2007-6570
Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote…
–
CVE-2007-6571
Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via…
–
CVE-2007-6572
Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via…