Known Vulnerabilities for Jrun by Macromedia
Listed below are 10 of the newest known vulnerabilities associated with "Jrun" by "Macromedia".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2005-4473 | Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code v... | 5 - MEDIUM | 2005-12-22 | 2011-03-08 |
| CVE-2005-4472 | Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service an... | 7.5 - HIGH | 2005-12-22 | 2011-03-08 |
| CVE-2005-2306 | Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate au... | 3.7 - LOW | 2005-07-19 | 2008-09-05 |
| CVE-2004-2182 | Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user... | 7.5 - HIGH | 2004-12-31 | 2008-09-05 |
| CVE-2004-1816 | Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an arra... | 5 - MEDIUM | 2004-03-15 | 2017-07-11 |
| CVE-2004-1815 | Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an a... | 5 - MEDIUM | 2004-03-15 | 2017-07-11 |
| CVE-2004-1478 | JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation at... | 7.5 - HIGH | 2004-12-31 | 2017-07-11 |
| CVE-2004-1477 | Cross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbitrary w... | 4.3 - MEDIUM | 2004-12-31 | 2017-07-11 |
| CVE-2004-0928 | The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass... | 5 - MEDIUM | 2004-10-05 | 2017-07-11 |
| CVE-2004-0646 | Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_j... | 10 - HIGH | 2004-12-23 | 2017-07-11 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Macromedia | Jrun | 4.0_build_61650 | All | All | All |
| Application | Macromedia | Jrun | 4.0 | All | All | All |
| Application | Macromedia | Jrun | 4.0 | sp1 | All | All |
| Application | Macromedia | Jrun | 4.0 | sp1a | All | All |
| Application | Macromedia | Jrun | 3.1 | All | All | All |
| Application | Macromedia | Jrun | 3.0 | All | All | All |
| Application | Macromedia | Jrun | 3.0 | sp1 | All | All |
| Application | Macromedia | Jrun | 2.3.3 | All | All | All |
| Application | Macromedia | Jrun | 2.3 | All | All | All |
| Application | Macromedia | Jrun | - | All | All | All |