CVE-2006-3225: XSS
Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Edition 8.1 2005 Q1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3225?
CVE-2006-3225 is classified as a medium severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2006-3225?
To fix CVE-2006-3225, upgrade to the latest version of Sun ONE Application Server 7, Java System Application Server 7, or Java System Application Server Enterprise Edition 8.1.
What are the affected versions related to CVE-2006-3225?
CVE-2006-3225 affects Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Edition 8.1 2005 Q1.
What type of attacks can CVE-2006-3225 facilitate?
CVE-2006-3225 can facilitate remote attackers to inject arbitrary HTML or web scripts.
Is CVE-2006-3225 an environment-specific vulnerability?
Yes, CVE-2006-3225 specifically impacts Sun's application servers and their certain versions.