One Application Server (Sun) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 16 known versions, newest CVE from 2006-12-04. Vendor: Sun.
CVEs of One Application Server
- CVE-2006-6276 - CVSS 6.8 (medium), 2006-12-04: HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web…
- CVE-2006-5654 - CVSS 4 (medium), 2006-11-03: Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3,…
- CVE-2006-3225 - CVSS 2.6 (low), 2006-06-26: Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java…
- CVE-2006-2501 - CVSS 6.8 (medium), 2006-05-20: Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7…
- CVE-2005-4046 - CVSS 4 (medium), 2005-12-07: Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition…
- CVE-2004-0826 - CVSS 7.5 (high), 2004-12-31: Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length…
- CVE-2004-1815 - CVSS 5 (medium), 2004-03-15: Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers…
- CVE-2003-0414 - CVSS 7.2 (high), 2003-06-30: The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows local users to gain…
- CVE-2003-0413 - CVSS 6.8 (medium), 2003-06-30: Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java…
- CVE-2003-0412 - CVSS 5 (medium), 2003-06-30: Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers to hide malicious…
- CVE-2002-0387 - CVSS 7.5 (high), 2003-03-18: Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary…
- CVE-2002-1042 - CVSS 5 (medium), 2002-10-04: Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows…
