Approved changes feed: RSS · Atom

cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:*

part: a version: 6.0 update: sp3

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductOne Web Server (b1bb3f1d-17e0-5a5f-907f-75a2d36e6839)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2501 vulnerable 2026-06-08 04:49:06.932321 Details available
Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages.
Published: 2006-05-20T02:59:00.000Z
Updated: 2024-08-07T17:51:04.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2763 vulnerable 2026-06-08 04:48:10.838067 Details available
The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.
Published: 2009-06-01T22:00:00.000Z
Updated: 2024-09-17T00:11:42.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0826 vulnerable 2026-06-08 04:47:51.544842 Details available
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.
Published: 2004-09-02T04:00:00.000Z
Updated: 2024-08-08T00:31:47.919Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1590 vulnerable 2026-06-08 04:47:48.007575 Details available
Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 6.0 SP3 through SP5 on Windows allows remote attackers to cause a denial of service (daemon crash) via unknown vectors.
Published: 2010-02-25T19:00:00.000Z
Updated: 2024-08-08T02:35:17.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1589 vulnerable 2026-06-08 04:47:48.005453 Details available
Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 before SP13 and 6.0 before SP6 on Windows allows attackers to cause a denial of service (daemon crash) via unknown vectors.
Published: 2010-02-25T19:00:00.000Z
Updated: 2024-08-08T02:35:17.328Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1578 vulnerable 2026-06-08 04:47:47.990621 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1577 vulnerable 2026-06-08 04:47:47.989282 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1126 vulnerable 2026-06-08 04:47:23.441827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1042 vulnerable 2026-06-08 04:46:22.793640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.