Java System Application Server@8.1 Security Vulnerabilities and Issues — Java System Application Server@8.1 CVE List

Lucene search

SunJava System Application Server8.1

9 matches found

CVE•added 2009/01/27 2:30 a.m.•72 views

CVE-2009-0278

Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2) META-INF directory via a malformed request.

5CVSS6.3AI score0.00467EPSS

CVE•added 2012/10/16 11:55 p.m.•58 views

CVE-2012-3155

Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remote attackers to affect availability, related to CORBA ORB.

5CVSS6.3AI score0.0082EPSS

CVE•added 2006/12/04 11:28 a.m.•45 views

CVE-2006-6276

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting (XSS), and poison web ca...

6.8CVSS6.5AI score0.01141EPSS

CVE•added 2006/07/28 11:4 p.m.•44 views

CVE-2006-3921

Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI.

4CVSS6.1AI score0.00749EPSS

CVE•added 2005/12/07 11:3 a.m.•41 views

CVE-2005-4046

Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct man-in-th...

4CVSS7.1AI score0.00437EPSS

CVE•added 2007/07/26 7:30 p.m.•41 views

CVE-2007-4025

Unspecified vulnerability in Sun Java System (SJS) Application Server 8.1 through 9.0 before 20070724 on Windows allows remote attackers to obtain JSP source code via unspecified vectors.

4.3CVSS6.9AI score0.00733EPSS

CVE•added 2007/10/01 5:17 a.m.•40 views

CVE-2007-5153

Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allows remote attackers to execute arbitrary code via unspecified vectors.

6.8CVSS7.7AI score0.03813EPSS

CVE•added 2006/06/26 4:5 p.m.•33 views

CVE-2006-3225

Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Edition 8.1 2005 Q1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors.

2.6CVSS6.1AI score0.00674EPSS

CVE•added 2006/05/25 10:0 a.m.•32 views

CVE-2005-4804

Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, and Platform Edition UR1, allows remote attackers to read .jar files via unknown vectors related to deployed web applications.

5CVSS6.9AI score0.00708EPSS