Approved changes feed: RSS · Atom

cpe:2.3:a:sun:java_system_web_server:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJava System Web Server (8d3d91c0-14f0-5a23-a9c1-a530b357541b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-2518 vulnerable 2026-06-08 04:50:24.221579 Details available
Cross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search/advanced.jsp) in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter.
Published: 2008-06-03T14:00:00.000Z
Updated: 2024-08-07T09:05:29.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2120 vulnerable 2026-06-08 04:50:23.010346 Details available
Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to obtain source code of JSP files via unknown vectors.
Published: 2008-05-09T15:00:00.000Z
Updated: 2024-08-07T08:49:57.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6572 vulnerable 2026-06-08 04:50:09.122511 Details available
Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566204.
Published: 2007-12-28T21:00:00.000Z
Updated: 2024-08-07T16:11:06.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6571 vulnerable 2026-06-08 04:50:09.121352 Details available
Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6611356.
Published: 2007-12-28T21:00:00.000Z
Updated: 2024-08-07T16:11:06.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6570 vulnerable 2026-06-08 04:50:09.120021 Details available
Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309.
Published: 2007-12-28T21:00:00.000Z
Updated: 2024-08-07T16:11:06.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4164 vulnerable 2026-06-08 04:49:55.843149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3715 vulnerable 2026-06-08 04:49:54.723875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.