Vulnerability Name:

CVE-2007-6571 (CCN-43977)

Assigned:2007-12-21
Published:2007-12-21
Updated:2017-08-08
Summary:Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6611356.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-79
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2007-6571

Source: CCN
Type: SA28216
Sun Java System Web Server / Web Proxy Server Cross-Site Scripting

Source: SECUNIA
Type: UNKNOWN
28216

Source: CCN
Type: Sun Alert ID: 200648
Cross-site Scripting Vulnerability in Sun Java System Web Server and Web Proxy Server

Source: SUNALERT
Type: UNKNOWN
103002

Source: CCN
Type: ASA-2008-002
Cross-site Scripting Vulnerability in Sun Java System Web Server and Web Proxy Server (Sun 103002)

Source: CCN
Type: OSVDB ID: 40849
Sun Java System Web Proxy Server Unspecified XSS (6611356)

Source: BID
Type: Patch
26978

Source: CCN
Type: BID-26978
Sun Java Web Proxy Server and Sun Java Web Server Multiple Cross-Site Scripting Vulnerabilities

Source: VUPEN
Type: UNKNOWN
ADV-2007-4313

Source: XF
Type: UNKNOWN
javasystem-proxy-unspecified-xss(43977)

Source: XF
Type: UNKNOWN
javasystem-proxy-unspecified-xss(43977)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:sun:java_system_web_proxy_server:3.6:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp1:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp10:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp2:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp3:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp4:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp5:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp6:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp7:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp8:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp9:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:4.0:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:4.0:sp1:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:4.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:4.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:4.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:4.0.5:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp1:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp10:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp2:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp3:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp4:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp5:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp6:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp7:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp8:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp9:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp1:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp2:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp3:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp4:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp5:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp6:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp7:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:7.0:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:sun:java_system_web_proxy_server:3.6:sp6:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp8:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:7.0:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:4.0:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp1:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp10:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp2:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp3:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp4:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp5:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp7:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp8:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:3.6:sp9:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:4.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:4.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:4.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:4.0.5:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:*:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp1:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp2:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp3:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp4:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp5:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp6:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.1:sp7:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_proxy_server:4.0:sp1:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp1:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp2:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp3:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp4:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp5:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp6:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp7:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp9:*:*:*:*:*:*
  • OR cpe:/a:sun:java_system_web_server:6.0:sp10:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    sun java system web proxy server 3.6
    sun java system web proxy server 3.6 sp1
    sun java system web proxy server 3.6 sp10
    sun java system web proxy server 3.6 sp2
    sun java system web proxy server 3.6 sp3
    sun java system web proxy server 3.6 sp4
    sun java system web proxy server 3.6 sp5
    sun java system web proxy server 3.6 sp6
    sun java system web proxy server 3.6 sp7
    sun java system web proxy server 3.6 sp8
    sun java system web proxy server 3.6 sp9
    sun java system web proxy server 4.0
    sun java system web proxy server 4.0 sp1
    sun java system web proxy server 4.0.2
    sun java system web proxy server 4.0.3
    sun java system web proxy server 4.0.4
    sun java system web proxy server 4.0.5
    sun java system web server 6.0
    sun java system web server 6.0 sp1
    sun java system web server 6.0 sp10
    sun java system web server 6.0 sp2
    sun java system web server 6.0 sp3
    sun java system web server 6.0 sp4
    sun java system web server 6.0 sp5
    sun java system web server 6.0 sp6
    sun java system web server 6.0 sp7
    sun java system web server 6.0 sp8
    sun java system web server 6.0 sp9
    sun java system web server 6.1
    sun java system web server 6.1 sp1
    sun java system web server 6.1 sp2
    sun java system web server 6.1 sp3
    sun java system web server 6.1 sp4
    sun java system web server 6.1 sp5
    sun java system web server 6.1 sp6
    sun java system web server 6.1 sp7
    sun java system web server 7.0
    sun java system web proxy server 3.6 sp6
    sun java system web server 6.0 sp8
    sun java system web server 6.1
    sun java system web proxy server 3.6
    sun java system web server 7.0
    sun java system web proxy server 4.0
    sun java system web proxy server 3.6 sp1
    sun java system web proxy server 3.6 sp10
    sun java system web proxy server 3.6 sp2
    sun java system web proxy server 3.6 sp3
    sun java system web proxy server 3.6 sp4
    sun java system web proxy server 3.6 sp5
    sun java system web proxy server 3.6 sp7
    sun java system web proxy server 3.6 sp8
    sun java system web proxy server 3.6 sp9
    sun java system web proxy server 4.0.2
    sun java system web proxy server 4.0.3
    sun java system web proxy server 4.0.4
    sun java system web proxy server 4.0.5
    sun java system web server 6.0
    sun java system web server 6.1 sp1
    sun java system web server 6.1 sp2
    sun java system web server 6.1 sp3
    sun java system web server 6.1 sp4
    sun java system web server 6.1 sp5
    sun java system web server 6.1 sp6
    sun java system web server 6.1 sp7
    sun java system web proxy server 4.0 sp1
    sun java system web server 6.0 sp1
    sun java system web server 6.0 sp2
    sun java system web server 6.0 sp3
    sun java system web server 6.0 sp4
    sun java system web server 6.0 sp5
    sun java system web server 6.0 sp6
    sun java system web server 6.0 sp7
    sun java system web server 6.0 sp9
    sun java system web server 6.0 sp10