Approved changes feed: RSS · Atom

cpe:2.3:a:sun:java_system_web_server:6.1:*:windows:*:*:*:*:*

part: a version: 6.1 update: *

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJava System Web Server (8d3d91c0-14f0-5a23-a9c1-a530b357541b)
Editionwindows
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2445 vulnerable 2026-06-08 04:51:28.540438 Details available
Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI.
Published: 2009-07-13T17:00:00.000Z
Updated: 2024-08-07T05:52:14.958Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2166 vulnerable 2026-06-08 04:50:23.105437 Details available
Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unknown parameters in index.jsp.
Published: 2008-05-13T20:14:00.000Z
Updated: 2024-08-07T08:49:58.528Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6569 vulnerable 2026-06-08 04:50:09.096447 Details available
Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246.
Published: 2007-12-28T21:00:00.000Z
Updated: 2024-08-07T16:11:06.027Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.