CVE-2007-6569: XSS
First published: Fri Dec 28 2007(Updated: )
Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun Java System Web Server | =6.1 | |
| Sun Java System Web Server | =6.1 | |
| Sun Java System Web Server | =7.0 | |
| Sun Java System Web Server | =7.0 | |
| Sun Java System Web Server | =7.0 | |
| Oracle Sun Java System Web Proxy Server | <=4.0.6 | |
| Oracle Sun Java System Web Proxy Server | <=4.0.6 | |
| Oracle Sun Java System Web Proxy Server | <=4.0.6 | |
| Sun Java System Web Server | =7.0 | |
| Sun Java System Web Server | =6.1 | |
| Oracle Sun Java System Web Proxy Server | =3.6 | |
| Oracle Sun Java System Web Proxy Server | <=4.0.6 | |
| Oracle Sun Java System Web Proxy Server | <=4.0.6 | |
| Oracle Sun Java System Web Proxy Server | =3.6 | |
| Sun Java System Web Server | =6.1 | |
| Sun Java System Web Server | =7.0 | |
| Oracle Sun Java System Web Proxy Server | =3.6 | |
| Sun Java System Web Server | =6.1 | |
| Oracle Sun Java System Web Proxy Server | =3.6 | |
| Sun Java System Web Server | =6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2007-6569?
CVE-2007-6569 has a moderate severity as it allows for cross-site scripting attacks that can compromise user data.
How do I fix CVE-2007-6569?
To fix CVE-2007-6569, upgrade to Sun Java System Web Proxy Server version 4.0.6 or later.
What software is affected by CVE-2007-6569?
CVE-2007-6569 affects Sun Java System Web Proxy Server versions prior to 4.0.6 and certain versions of Sun Java System Web Server.
Can CVE-2007-6569 be exploited remotely?
Yes, CVE-2007-6569 can be exploited remotely by attackers injecting arbitrary web scripts.
What are the potential impacts of exploiting CVE-2007-6569?
Exploiting CVE-2007-6569 can lead to unauthorized actions being performed on behalf of users, potentially exposing sensitive information.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/remedy
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/sun
- canonical/sun java system web server
- version/sun java system web server/6.1
- version/sun java system web server/7.0
- canonical/oracle sun java system web proxy server
- version/oracle sun java system web proxy server/4.0.6
- version/oracle sun java system web proxy server/3.6