CVE-2003-0413
6.3 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.2%
Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java System Web Server 6.1 allows remote attackers to insert arbitrary web script or HTML via an HTTP request that generates an “Invalid JSP file” error, which inserts the text in the resulting error message.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sun:one_application_server | sun one application server | eq | 7.0 |
References
marc.info/?l=bugtraq&m=105409846029475&w=2
sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity
sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57605
sunsolve.sun.com/search/document.do?assetkey=1-66-201009-1
sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
www.ciac.org/ciac/bulletins/n-103.shtml
www.iss.net/security_center/static/12095.php
www.securityfocus.com/bid/7710
www.spidynamics.com/sunone_alert.html
6.3 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.2%