Approved changes feed: RSS · Atom

cpe:2.3:a:sun:java_system_web_server:6.1:sp5:windows:*:*:*:*:*

part: a version: 6.1 update: sp5

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJava System Web Server (8d3d91c0-14f0-5a23-a9c1-a530b357541b)
Editionwindows
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2445 vulnerable 2026-06-08 04:51:28.541679 Details available
Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI.
Published: 2009-07-13T17:00:00.000Z
Updated: 2024-08-07T05:52:14.958Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1934 vulnerable 2026-06-08 04:51:25.834464 Details available
Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allows remote attackers to inject arbitrary web script or HTML via the query string in situations that result in a 502 Gateway error.
Published: 2009-06-05T15:25:00.000Z
Updated: 2024-08-07T05:27:54.919Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.