Unscored CVE-2006-3225 EUVD-2006-3222GHSA-xc8r-vcf9-cfpr

Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Up…

Published Jun 26, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Edition 8.1 2005 Q1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors.

References

20835 third-party-advisory
18635 vdb-entry
102479 vendor-advisory
ADV-2006-2508 vdb-entry
1016378 vdb-entry
sun-java-parameters-xss(27392) vdb-entry