JS
Product
Java System Web Server
32
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Java System Web Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-0389 | – | Jan 25 | The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP request… Affected: 7.0; 7.0 |
| CVE-2010-0388 | – | Jan 25 | Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (daemon crash)… Affected: 7.0 |
| CVE-2010-0387 | – | Jan 25 | Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackers to cause a denial of service… Affected: 7.0 |
| CVE-2010-0361 | – | Jan 20 | Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service… Affected: 7.0 |
| CVE-2010-0360 | – | Jan 20 | Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a… Affected: 7.0 |
| CVE-2010-0273 | – | Jan 8 | Unspecified vulnerability in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to execute arbitrary code by sending a process memory address and crafted… Affected: 7.0 |
| CVE-2010-0272 | – | Jan 8 | Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover process memory locations via crafted data to TCP port 80, as… Affected: 7.0 |
| CVE-2009-3878 | – | Nov 5 | Buffer overflow in Sun Java System Web Server 7.0 Update 6 has unspecified impact and remote attack vectors, as demonstrated by the vd_sjws module in VulnDisco Pack Professional… Affected: 7.0 |
| CVE-2009-2713 | – | Aug 7 | The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that "policy advice" is… Affected: 7.0 |
| CVE-2009-2712 | – | Aug 7 | Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover… Affected: 7.0 |
| CVE-2009-2445 | – | Jul 13 | Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers… Affected: 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +5 more |
| CVE-2009-1934 | – | Jun 5 | Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allows remote attackers to inject arbitrary web script or HTML… Affected: 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +34 more |
| CVE-2008-2518 | – | Jun 3 | Cross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search/advanced.jsp) in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows… Affected: 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +6 more |
| CVE-2008-2166 | – | May 13 | Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to inject arbitrary web… Affected: 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +5 more |
| CVE-2008-2120 | – | May 9 | Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to… Affected: through 6.1; 7.0 |
| CVE-2007-6572 | – | Dec 28 | Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via… Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +14 more |
| CVE-2007-6569 | – | Dec 28 | Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web… Affected: 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +5 more |
| CVE-2007-6570 | – | Dec 28 | Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote… Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +14 more |
| CVE-2007-6571 | – | Dec 28 | Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via… Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +14 more |
| CVE-2007-4164 | – | Aug 7 | CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server Application Function (SAF) uses the… Affected: 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +3 more |
| CVE-2007-3715 | – | Jul 11 | Sun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows… Affected: 7.0; 7.0; 7.0; 7.0; 7.0; 7.0 |
| CVE-2007-1526 | – | Mar 20 | Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List (CRL) authorization… Affected: 6.1 |
| CVE-2007-1488 | – | Mar 16 | Unspecified vulnerability in Sun Java System Web Server 6.0 and 6.1 before 20070315 allows remote attackers to "gain unauthorized access to data", possibly involving a sample… Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +12 more |
| CVE-2006-6276 | – | Dec 4 | HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows… Affected: 6.0; 6.1 |
| CVE-2006-5654 | – | Nov 3 | Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3, when SSLv2 is… Affected: 6.0 |
| CVE-2006-3921 | – | Jul 28 | Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root… Affected: 6.0; 6.1; 6.1; 6.1; 6.1; 6.1; +1 more |
| CVE-2006-2501 | – | May 20 | Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard… Affected: through 6.1; 6.1; 6.1; 6.1; 6.1 |
| CVE-2005-1889 | – | Jun 7 | Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files Affected: through 6.1; 6.1 |
| CVE-2005-1150 | – | May 2 | Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service (hang) Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +2 more |
| CVE-2004-2216 | – | Dec 31 | Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote attackers to cause a… Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +4 more |
| CVE-2000-0812 | – | Nov 14 | The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the… Affected: 1.1.2; 1.1.3; 1.1_beta; 2.0 |
| CVE-2000-0629 | – | Jul 12 | The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html,… Affected: 1.1.3; 2.0 |
Showing 32