CVE-2010-4456

CVE-2010-4456 affects Oracle Sun Java System Communications Express 6.2 and 6.3. The vulnerability allows remote attackers to affect integrity via unknown vectors related to Web Mail. The description does not specify concrete exploit details, affected versions beyond 6.2/6.3, or a remediation. No...

CVE-2010-4431

CVE-2010-4431 affects Oracle Sun Java System Portal Server 7.1 Update 2 on Solaris (SPARC/X86). The vulnerability is described as an unspecified local-confidentiality issue related to the Portal’s proxy handling. Nessus/NVD references suggest patches are available: Solaris patch 124301-16 (SPARC)...

CVE-2010-4444: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Java System Access Manager and Oracle OpenSSO 7, 7.1, and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

PT-2011-1535

Name of the Vulnerable Software and Affected Versions Oracle Sun Java System Portal Server versions 7.1 through 7.2 Description The issue affects confidentiality and is related to the Proxy component. It allows local users to exploit the vulnerability via unknown vectors. Recommendations For Orac...

PT-2011-1542

Name of the Vulnerable Software and Affected Versions Oracle GlassFish versions 2.1 through 3.0.1 Java System Message Queue version 4.1 Description The issue affects confidentiality, integrity, and availability, and is related to Java Message Service JMS, allowing local users to exploit it...

CVE-2010-4456: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to affect integrity via unknown vectors related to Web Mail...

PT-2011-1548

Name of the Vulnerable Software and Affected Versions Oracle Sun Java System Access Manager and Oracle OpenSSO versions 7, 7.1, and 8 Description The issue affects confidentiality, integrity, and availability. It can be exploited by remote attackers via unknown vectors. Recommendations For Oracle...

CVE-2010-4431: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Java System Portal Server 7.1 and 7.2 allows local users to affect confidentiality via unknown vectors related to Proxy...

PT-2011-1560

Name of the Vulnerable Software and Affected Versions Oracle Sun Java System Communications Express versions 6.2 through 6.3 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to Web Mail. Recommendations For versions 6.2...

CVE-2010-4438: Undefined Security Weakness

Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service JMS...

Oracle Java System Web Server HTTP Response Splitting Vulnerability - Active Check

Oracle Java System Web Server is prone to an HTTP response splitting vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Oracle Java System Web Server HTTP Response Splitting Vulnerability

The host is running Oracle Java System Web Server and is prone to HTTP response splitting vulnerability. OpenVAS Vulnerability Test $Id: gboraclesjswebserverresponsesplittingvuln.nasl 5390 2017-02-21 18:39:27Z mime $ Oracle Java System Web Server HTTP Response Splitting Vulnerability Authors: Ant...

Oracle iPlanet Web Server Multiple Unspecified Vulnerabilities (cpuoct2010)

Oracle iPlanet Web Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle Sun Java System Web Server - HTTP Response Splitting

Exploit for jsp platform in category web applications =========================================================== Oracle Sun Java System Web Server - HTTP Response Splitting =========================================================== Description Security-Assessment.com discovered that is possible...

Oracle Sun Java System Web Server - HTTP Response Splitting

Description Security-Assessment.com discovered that is possible to successfully perform an HTTP Response Splitting attack against applications served by Sun Java System Web Server. The vulnerability can be exploited if user supplied input is used to generate the value of an HTTP header, as shown ...

Oracle Sun Java System Web Server - HTTP Response Splitting

Oracle Sun Java System Web Server - HTTP Response Splitting Description Security-Assessment.com discovered that is possible to successfully perform an HTTP Response Splitting attack against applications served by Sun Java System Web Server. The vulnerability can be exploited if user supplied inpu...

CVE-2010-3564

Unspecified vulnerability in the Oracle Communications Messaging Server Sun Java System Messaging Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained...

CVE-2010-3575

Unspecified vulnerability in the Oracle Communications Messaging Server Sun Java System Messaging Server component in Oracle Sun Products Suite 6.0, 6.2, 6.3, and 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Mail...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Communications Messaging Server Sun Java System Messaging Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained...

CVE-2010-3575

CVE-2010-3575 affects Oracle Communications Messaging Server (Sun Java System Messaging Server) within Oracle Sun Product Suite 6.0, 6.2, 6.3, and 7.0. In the Oracle Sun Products Suite risk matrix, the vulnerability is tied to the Web Mail component and is remotely exploitable without authenticat...