Cross-site Scripting Vulnerability in Sun Java System Application Server by Sun Microsystems
CVE-2005-0742

Currently unrated

Key Information:

Vendor
Oracle
Status
Java System Application Server
Vendor
CVE Published:
2 May 2005

Summary

The Sun Java System Application Server 7 is susceptible to a Cross-site Scripting (XSS) vulnerability that enables remote attackers to inject arbitrary web scripts or HTML into online forms or pages. This can lead to consequences such as data theft, unauthorized access to user information, and the potential for broader attacks on web application users. The vulnerability arises due to improper validation of user input, rendering it essential for users and administrators to implement necessary patches and security measures.

References

http://www.securityfocus.com/bid/12775
vdb-entryx_refsource_BID
http://sunsolve.sun.com/search/document.do?assetkey=1-26-...
vendor-advisoryx_refsource_SUNALERT
http://sunsolve.sun.com/search/document.do?assetkey=1-66-...
vendor-advisoryx_refsource_SUNALERT

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.