Java System Portal Server (Sun) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2011-01-19. Vendor: Sun.

CVEs of Java System Portal Server

• CVE-2010-4431 - CVSS 1 (low), 2011-01-19: Unspecified vulnerability in Oracle Sun Java System Portal Server 7.1 and 7.2 allows local users to affect confidentiality via unknown vectors related to Proxy.
• CVE-2009-4187 - CVSS 4.3 (medium), 2009-12-03: Multiple cross-site scripting (XSS) vulnerabilities in the Gateway component in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allow remote attackers to…
• CVE-2009-1796 - CVSS 4.3 (medium), 2009-05-26: Cross-site scripting (XSS) vulnerability in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML…
• CVE-2008-6192 - CVSS 4.3 (medium), 2009-02-19: Multiple cross-site scripting (XSS) vulnerabilities in unspecified Portlets in Sun Java System Portal Server 7.0 and 7.1 allow remote attackers to inject…
• CVE-2008-5549 - CVSS 5 (medium), 2008-12-12: Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local files…
• CVE-2007-4289 - CVSS 6.8 (medium), 2007-08-09: Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to…