Cross site scripting

2009-07-0113:00:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
java_web_consoleeq3.0.2 linux
java_web_consoleeq3.0.5 solaris9-sparc
java_web_consoleeq3.0.2 solaris9-sparc
java_web_consoleeq3.0.3
java_web_consoleeq3.0.2 solaris8-x86
java_web_consoleeq3.0.3 solaris9-x86
java_web_consoleeq3.0.5 solaris9-x86
java_web_consoleeq3.0.5 linux
java_web_consoleeq3.0.5
java_web_consoleeq3.0.2 windows

Name	Operator	Version
java_web_console	eq	3.0.2 linux
java_web_console	eq	3.0.5 solaris9-sparc
java_web_console	eq	3.0.2 solaris9-sparc
java_web_console	eq	3.0.3
java_web_console	eq	3.0.2 solaris8-x86
java_web_console	eq	3.0.3 solaris9-x86
java_web_console	eq	3.0.5 solaris9-x86
java_web_console	eq	3.0.5 linux
java_web_console	eq	3.0.5
java_web_console	eq	3.0.2 windows