JVN#50133036: Cross-site Request Forgery Vulnerability in Oracle iPlanet Web Server

Oracle iPlanet Web Server (formerly Sun Java System Web Server) is a web server. Oracle iPlanet Web Server contains a cross-site request forgery vulnerability.

Impact

If a user views a malicious page while logged into the Oracle iPlanet Web Server management console, an arbitrary instance may be stopped.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Oracle iPlanet Web Server prior to 7.0U9