CVE-2007-3503: XSS
Published Jun 30, 2007
·Updated
The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
2 affected components
Oracle JDK=1.5.0-update11
Oracle JDK=1.6.0
Event History
Jun 30, 2007
CVE Published
01:30 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3503?
CVE-2007-3503 is considered to have a medium severity due to its potential to allow cross-site scripting (XSS) attacks.
2
How do I fix CVE-2007-3503?
To fix CVE-2007-3503, update to a later version of Oracle JDK that addresses this vulnerability.
3
What versions of JDK are affected by CVE-2007-3503?
CVE-2007-3503 affects Oracle JDK 5.0 Update 11 and JDK 6.0.
4
What type of vulnerability is CVE-2007-3503?
CVE-2007-3503 is a cross-site scripting (XSS) vulnerability.
5
Who can exploit CVE-2007-3503?
Remote attackers can exploit CVE-2007-3503 to inject arbitrary web scripts or HTML into documentation pages.