CVE-2007-6571
Summary
| CVE | CVE-2007-6571 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2007-12-28 21:46:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6611356. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Sun | Java System Web Proxy Server | 3.6 | All | All | All |
| Application | Sun | Java System Web Proxy Server | 3.6 | sp1 | All | All |
| Application | Sun | Java System Web Proxy Server | 3.6 | sp10 | All | All |
| Application | Sun | Java System Web Proxy Server | 3.6 | sp2 | All | All |
| Application | Sun | Java System Web Proxy Server | 3.6 | sp3 | All | All |
| Application | Sun | Java System Web Proxy Server | 3.6 | sp4 | All | All |
| Application | Sun | Java System Web Proxy Server | 3.6 | sp5 | All | All |
| Application | Sun | Java System Web Proxy Server | 3.6 | sp6 | All | All |
| Application | Sun | Java System Web Proxy Server | 3.6 | sp7 | All | All |
| Application | Sun | Java System Web Proxy Server | 3.6 | sp8 | All | All |
| Application | Sun | Java System Web Proxy Server | 3.6 | sp9 | All | All |
| Application | Sun | Java System Web Proxy Server | 4.0 | All | All | All |
| Application | Sun | Java System Web Proxy Server | 4.0 | sp1 | All | All |
| Application | Sun | Java System Web Proxy Server | 4.0.2 | All | All | All |
| Application | Sun | Java System Web Proxy Server | 4.0.3 | All | All | All |
| Application | Sun | Java System Web Proxy Server | 4.0.4 | All | All | All |
| Application | Sun | Java System Web Proxy Server | 4.0.5 | All | All | All |
| Application | Sun | Java System Web Server | 6.0 | All | All | All |
| Application | Sun | Java System Web Server | 6.0 | sp1 | All | All |
| Application | Sun | Java System Web Server | 6.0 | sp10 | All | All |
| Application | Sun | Java System Web Server | 6.0 | sp2 | All | All |
| Application | Sun | Java System Web Server | 6.0 | sp3 | All | All |
| Application | Sun | Java System Web Server | 6.0 | sp4 | All | All |
| Application | Sun | Java System Web Server | 6.0 | sp5 | All | All |
| Application | Sun | Java System Web Server | 6.0 | sp6 | All | All |
| Application | Sun | Java System Web Server | 6.0 | sp7 | All | All |
| Application | Sun | Java System Web Server | 6.0 | sp8 | All | All |
| Application | Sun | Java System Web Server | 6.0 | sp9 | All | All |
| Application | Sun | Java System Web Server | 6.1 | All | All | All |
| Application | Sun | Java System Web Server | 6.1 | sp1 | All | All |
| Application | Sun | Java System Web Server | 6.1 | sp2 | All | All |
| Application | Sun | Java System Web Server | 6.1 | sp3 | All | All |
| Application | Sun | Java System Web Server | 6.1 | sp4 | All | All |
| Application | Sun | Java System Web Server | 6.1 | sp5 | All | All |
| Application | Sun | Java System Web Server | 6.1 | sp6 | All | All |
| Application | Sun | Java System Web Server | 6.1 | sp7 | All | All |
| Application | Sun | Java System Web Server | 7.0 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| sunsolve.sun.com/search/document.do | af854a3a-2127-422b-91ae-364da2661108 | sunsolve.sun.com | |
| Sun Java System Web Server / Web Proxy Server Cross-Site Scripting - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Sun Java Web Proxy Server and Sun Java Web Server Multiple Cross-Site Scripting Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.