Skip to contentSun Java vulnerabilities
- sun java asp serverMultiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active...CVE-2008-2403EPSS 19.4%10.0 High
- sun java asp serverThe Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive...CVE-2008-2402EPSS 11.4%5.0 Medium
- sun java active serverThe Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote...CVE-2008-24017.5 High
- sun java system web serverCross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search...CVE-2008-25184.3 Medium
- sun java system web serverCross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1...CVE-2008-21664.3 Medium
- sun java system application server, java system web server +1 moreUnspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web...CVE-2008-21205.0 Medium
- sun java system directory serverSun Java System Directory Proxy Server 6.0, 6.1, and 6.2 classifies a connection using the "bind...CVE-2008-19957.5 High
- sun java web consoleUnspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers...CVE-2008-12867.8 High
- sun java system access managerMultiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java...CVE-2008-12044.3 Medium
- sun java system identity managerOpen redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1...CVE-2008-02415.8 Medium
- sun java system identity manager/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows...CVE-2008-0240Public exploit4.3 Medium
- sun java system identity managerMultiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1...CVE-2008-0239Public exploit4.3 Medium
- sun java system web server, java system web proxy server +1 moreCross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0...CVE-2007-65724.3 Medium
- sun java system web proxy server, java system web server +1 moreCross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on...CVE-2007-65714.3 Medium
- sun java system web proxy server, java system web server +1 moreCross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java...CVE-2007-65704.3 Medium
- sun java system web proxy server, java system web server +1 moreCross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System...CVE-2007-65694.3 Medium
- sun javamail** DISPUTED ** Javamail does not properly handle a series of invalid login attempts in which the...CVE-2007-6059Disputed5.0 Medium
- sun java virtual machineInterpretation conflict in the Sun Java Virtual Machine (JVM) allows user-assisted remote...CVE-2007-53752.6 Low
- sun java system access manager, java system application server +1 moreUnspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java...CVE-2007-51536.8 Medium
- sun java system access manager, java system application server +1 moreSun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1...CVE-2007-51527.5 High
- sun java web start, jre, sdk +2 moreBuffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6...CVE-2007-5019Public exploitEPSS 10.5%10.0 High
- sun java system application serverThe Sun Admin Console in Sun Application Server 9.0_0.1 does not apply certain configuration...CVE-2007-45115.0 Medium
- sun java system portal serverSun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms...CVE-2007-42896.8 Medium
- sun java system web serverCRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0...CVE-2007-41647.5 High
- sun java system application serverUnspecified vulnerability in Sun Java System (SJS) Application Server 8.1 through 9.0 before...CVE-2007-40254.3 Medium
- sun java system application server, java system web server +1 moreSun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly...CVE-2007-37159.3 High
- sun java system access managerSun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the...CVE-2007-37001.7 Low
- sun java system directory serverUnspecified vulnerability in Sun Java System Directory Server (slapd) 6.0, and 5.2 with Patch 3...CVE-2007-32256.4 Medium
- sun java system directory server, one directory server +1 moreUnspecified vulnerability in Sun ONE/Java System Directory Server (slapd) 6.0, and 5.x before 5.2...CVE-2007-32245.0 Medium
- sun java embedding pluginJava Embedding Plugin 0.9.6.1 allows remote attackers to cause a denial of service (browser crash...CVE-2007-29065.0 Medium
- sun java system messaging serverCross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.0 through 6.3,...CVE-2007-29044.3 Medium
- sun java system web proxy serverMultiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy...CVE-2007-2881EPSS 25.7%10.0 High
- sun java system directory server, one directory server +1 moreUnspecified vulnerability in the LDAP Software Development Kit (SDK) for C, as used in Sun Java...CVE-2007-24667.8 High
- sun jre, sdk, java enterprise system +2 moreSun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1...CVE-2007-243510.0 High
- sun java web console, solaris +1 moreFormat string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2...CVE-2007-16817.5 High
- sun java system directory server, one directory server +1 moreThe LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE...CVE-2006-41757.8 High
- sun java system web serverSun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked...CVE-2007-15266.0 Medium
- sun java system web serverUnspecified vulnerability in Sun Java System Web Server 6.0 and 6.1 before 20070315 allows remote...CVE-2007-14887.5 High
- sun java dynamic management kitThe Java Management Extensions Remote API Remote Method Invocation over Internet Inter-ORB...CVE-2007-14194.3 Medium
- sun java system access managerMultiple cross-site scripting (XSS) vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6...CVE-2007-06284.3 Medium
- sun chainkey java code protectionChainKey Java Code Protection allows attackers to decompile Java class files via a Java class...CVE-2007-00144.4 Medium
- sun java system content delivery serverSun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain...CVE-2007-01145.0 Medium
- sun java system application server, java system web server, java system web proxy server +1 more +3 moreHTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used...CVE-2006-62766.8 Medium
- sun java system web server, one application server +1 moreUnspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6...CVE-2006-56544.0 Medium
- sun java system messenger expressCross-site scripting (XSS) vulnerability in the errorHTML function in the index script in Sun...CVE-2006-5653Public exploit4.3 Medium
- sun iplanet messaging server, java system messaging server +1 moreCross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0...CVE-2006-54864.3 Medium
- sun java system content delivery serverUnspecified vulnerability in Sun Java System Content Delivery Server 4.0, 4.1, and 5.0 allows...CVE-2006-43535.0 Medium
- sun j2se, java web start +1 moreThe Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE...CVE-2006-43025.0 Medium
- sun java system application server, java system web server +1 moreSun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1...CVE-2006-39214.0 Medium
- sun java system application server, one application server +1 moreCross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java...CVE-2006-32252.6 Low
- Show moreLoading…