Java System Web Server (Sun) - vulnerabilities (CVEs)

32 CVEs, 0 in the last 30 days, 89 known versions, newest CVE from 2010-01-25. Vendor: Sun.

CVEs of Java System Web Server

• CVE-2010-0389 - CVSS 5 (medium), 2010-01-25: The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash)…
• CVE-2010-0388 - CVSS 7.5 (high), 2010-01-25: Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of…
• CVE-2010-0387 - CVSS 7.5 (high), 2010-01-25: Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackers to cause a…
• CVE-2010-0361 - CVSS 10 (critical), 2010-01-20: Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a…
• CVE-2010-0360 - CVSS 10 (critical), 2010-01-20: Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory…
• CVE-2010-0273 - CVSS 7.5 (high), 2010-01-08: Unspecified vulnerability in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to execute arbitrary code by sending a process memory…
• CVE-2010-0272 - CVSS 7.5 (high), 2010-01-08: Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover process memory locations via crafted data…
• CVE-2009-3878 - CVSS 9.3 (critical), 2009-11-05: Buffer overflow in Sun Java System Web Server 7.0 Update 6 has unspecified impact and remote attack vectors, as demonstrated by the vd_sjws module in…
• CVE-2009-2713 - CVSS 4.3 (medium), 2009-08-07: The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that…
• CVE-2009-2712 - CVSS 2.1 (low), 2009-08-07: Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local…
• CVE-2009-2445 - CVSS 5 (medium), 2009-07-13: Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows,…
• CVE-2009-1934 - CVSS 4.3 (medium), 2009-06-05: Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allows remote attackers to inject…
• CVE-2008-2518 - CVSS 4.3 (medium), 2008-06-03: Cross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search/advanced.jsp) in Sun Java System Web Server 6.1 before SP9 and 7.0…
• CVE-2008-2166 - CVSS 4.3 (medium), 2008-05-13: Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to…
• CVE-2008-2120 - CVSS 5 (medium), 2008-05-09: Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows…
• CVE-2007-6571 - CVSS 4.3 (medium), 2007-12-28: Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script…
• CVE-2007-6570 - CVSS 4.3 (medium), 2007-12-28: Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11…
• CVE-2007-6569 - CVSS 4.3 (medium), 2007-12-28: Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to…
• CVE-2007-6572 - CVSS 4.3 (medium), 2007-12-28: Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web…
• CVE-2007-4164 - CVSS 7.5 (high), 2007-08-07: CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server Application Function…
• CVE-2007-3715 - CVSS 9.3 (critical), 2007-07-11: Sun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly process XSLT stylesheets in XSLT transforms in XML…
• CVE-2007-1526 - CVSS 6 (medium), 2007-03-20: Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List…
• CVE-2007-1488 - CVSS 7.5 (high), 2007-03-16: Unspecified vulnerability in Sun Java System Web Server 6.0 and 6.1 before 20070315 allows remote attackers to "gain unauthorized access to data", possibly…
• CVE-2006-6276 - CVSS 6.8 (medium), 2006-12-04: HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web…
• CVE-2006-5654 - CVSS 4 (medium), 2006-11-03: Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3,…
• CVE-2006-3921 - CVSS 4 (medium), 2006-07-28: Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1 allows remote authenticated users to read files outside of the…
• CVE-2006-2501 - CVSS 6.8 (medium), 2006-05-20: Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7…
• CVE-2005-1889 - CVSS 5 (medium), 2005-06-07: Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files.
• CVE-2005-1150 - CVSS 5 (medium), 2005-05-02: Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service (hang).
• CVE-2004-2216 - CVSS 5 (medium), 2004-12-31: Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote…
• CVE-2000-0812 - CVSS 10 (critical), 2000-11-14: The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the…
• CVE-2000-0629 - CVSS 7.5 (high), 2000-07-12: The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the…