Approved changes feed: RSS · Atom

cpe:2.3:a:sun:java_system_application_server:7.0:ur4:*:*:*:*:*:*

part: a version: 7.0 update: ur4

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJava System Application Server (95e10da0-09e7-5be1-b791-1345593279ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3921 vulnerable 2026-06-08 04:49:10.521707 Details available
Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI.
Published: 2006-07-28T23:00:00.000Z
Updated: 2024-08-07T18:48:39.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4805 vulnerable 2026-06-08 04:48:45.180041 Details available
Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to obtain the source code for Java Server pages (JSP) via unknown vectors.
Published: 2006-05-25T10:00:00.000Z
Updated: 2024-09-17T02:52:20.046Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0742 vulnerable 2026-06-08 04:48:13.507994 Details available
Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Published: 2005-03-13T05:00:00.000Z
Updated: 2024-08-07T21:21:06.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0826 vulnerable 2026-06-08 04:47:51.540413 Details available
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.
Published: 2004-09-02T04:00:00.000Z
Updated: 2024-08-08T00:31:47.919Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.