CVE-2006-3225

CVE-2006-3225

EPSS 1.9%

Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Edition 8.1 2005 Q1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://secunia.com/advisories/20835 http://securitytracker.com/id?1016378 https://exchange.xforce.ibmcloud.com/vulnerabilities/27392 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102479-1 http://www.securityfocus.com/bid/18635 http://www.vupen.com/english/advisories/2006/2508