CVE-2008-3425
Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service...
CVE-2008-3425 is a medium vulnerability (CVSS 6.5) in Sun N1 Service Provisioning System, published July 31, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.04%, the 81st percentile. No source names a fixed version.
Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors.
- Record
CVE-2008-3425- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors.
- Record
CVE-2008-3425- Updated
- 2026-11-02
EUVDEUVD-2008-3411 No score
Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors.
- Record
EUVD-2008-3411- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9hxq-m375-pvm5 No score
Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service...
Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors.
- Record
GHSA-9hxq-m375-pvm5- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
sunsolve.sun.com/search/document.do?assetkey=1-26-239566-1
secunia.com/advisories/31301
securitytracker.com/id?1020608
vupen.com/english/advisories/2008/2261/references
exchange.xforce.ibmcloud.com/vulnerabilities/44114
securityfocus.com/bid/30451
nvd.nist.gov/vuln/detail/CVE-2008-3425
github.com/advisories/GHSA-9hxq-m375-pvm5