Login Request a demo
Unscored severity · published Dec 28, 2007
CVE-2007-6570
Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Java System Web Proxy Server · Sun
3.6; 3.6; 3.6; 3.6; 3.6; 3.6; +11 more · source: NVD
JS
Java System Web Server · Sun
6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +14 more · source: NVD
Affected product
JS
Java System Web Proxy Server
Sun
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6570
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6570
docs.sun.com
http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view
docs.sun.com
http://docs.sun.com/source/820-3637-10/relnotes36sp11_unix.html#wp19247
osvdb.org
http://osvdb.org/40851
Patch
http://secunia.com/advisories/28186
secunia.com
http://secunia.com/advisories/28216
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1
More from Java System Web Proxy Server
–
CVE-2008-4541
Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET…
–
CVE-2008-3683
Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service (failure to…
–
CVE-2007-6569
Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web…
–
CVE-2007-6571
Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via…
–
CVE-2007-6572
Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via…