Lucene search
MitreCVE-2009-1934HistoryJun 05, 2009 - 4:00 p.m.
CVE-2009-1934
2009-06-0516:00:00
CWE-79
mitre
web.nvd.nist.gov
33
cve-2009-1934
cross-site scripting
xss
vulnerability
sun java system web server
gateway error
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.003
Percentile
70.5%
Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allows remote attackers to inject arbitrary web script or HTML via the query string in situations that result in a 502 Gateway error.
Affected configurations
Node
sunjava_system_web_serverMatch6.1sp10aix
ORsunjava_system_web_serverMatch6.1sp4aix
ORsunjava_system_web_serverMatch6.1sp5aix
ORsunjava_system_web_serverMatch6.1sp6aix
ORsunjava_system_web_serverMatch6.1sp7aix
ORsunjava_system_web_serverMatch6.1sp8aix
ORsunjava_system_web_serverMatch6.1sp9aix
ORsunone_web_serverMatch6.1aix
ORsunone_web_serverMatch6.1sp1aix
ORsunone_web_serverMatch6.1sp2aix
ORsunone_web_serverMatch6.1sp3aix
Node
sunjava_system_web_serverMatch6.1sp10hp_ux
ORsunjava_system_web_serverMatch6.1sp4hp_ux
ORsunjava_system_web_serverMatch6.1sp5hp_ux
ORsunjava_system_web_serverMatch6.1sp6hp_ux
ORsunjava_system_web_serverMatch6.1sp7hp_ux
ORsunjava_system_web_serverMatch6.1sp8hp_ux
ORsunjava_system_web_serverMatch6.1sp9hp_ux
ORsunone_web_serverMatch6.1hp_ux
ORsunone_web_serverMatch6.1sp1hp_ux
ORsunone_web_serverMatch6.1sp2hp_ux
ORsunone_web_serverMatch6.1sp3hp_ux
Node
sunjava_system_web_serverMatch6.1sp10linux
ORsunjava_system_web_serverMatch6.1sp4linux
ORsunjava_system_web_serverMatch6.1sp5linux
ORsunjava_system_web_serverMatch6.1sp6linux
ORsunjava_system_web_serverMatch6.1sp7linux
ORsunjava_system_web_serverMatch6.1sp8linux
ORsunjava_system_web_serverMatch6.1sp9linux
ORsunone_web_serverMatch6.1linux
ORsunone_web_serverMatch6.1sp1linux
ORsunone_web_serverMatch6.1sp2linux
ORsunone_web_serverMatch6.1sp3linux
Node
sunjava_system_web_serverMatch6.1sp10windows
ORsunjava_system_web_serverMatch6.1sp4windows
ORsunjava_system_web_serverMatch6.1sp5windows
ORsunjava_system_web_serverMatch6.1sp6windows
ORsunjava_system_web_serverMatch6.1sp7windows
ORsunjava_system_web_serverMatch6.1sp8windows
ORsunjava_system_web_serverMatch6.1sp9windows
ORsunone_web_serverMatch6.1windows
ORsunone_web_serverMatch6.1sp1windows
ORsunone_web_serverMatch6.1sp2windows
ORsunone_web_serverMatch6.1sp3windows
Node
sunjava_system_web_serverMatch6.1sp10sparc
ORsunjava_system_web_serverMatch6.1sp4sparc
ORsunjava_system_web_serverMatch6.1sp5sparc
ORsunjava_system_web_serverMatch6.1sp6sparc
ORsunjava_system_web_serverMatch6.1sp7sparc
ORsunjava_system_web_serverMatch6.1sp8sparc
ORsunjava_system_web_serverMatch6.1sp9sparc
ORsunone_web_serverMatch6.1sparc
ORsunone_web_serverMatch6.1sp1sparc
ORsunone_web_serverMatch6.1sp2sparc
ORsunone_web_serverMatch6.1sp3sparc
Node
sunjava_system_web_serverMatch6.1sp10x86
ORsunjava_system_web_serverMatch6.1sp4x86
ORsunjava_system_web_serverMatch6.1sp48x86
ORsunjava_system_web_serverMatch6.1sp5x86
ORsunjava_system_web_serverMatch6.1sp6x86
ORsunjava_system_web_serverMatch6.1sp7x86
ORsunjava_system_web_serverMatch6.1sp9x86
ORsunone_web_serverMatch6.1x86
ORsunone_web_serverMatch6.1sp1x86
ORsunone_web_serverMatch6.1sp2x86
ORsunone_web_serverMatch6.1sp3x86
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sun | java_system_web_server | 6.1 | cpe:2.3:a:sun:java_system_web_server:6.1:sp10:aix:*:*:*:*:* |
| sun | java_system_web_server | 6.1 | cpe:2.3:a:sun:java_system_web_server:6.1:sp4:aix:*:*:*:*:* |
| sun | java_system_web_server | 6.1 | cpe:2.3:a:sun:java_system_web_server:6.1:sp5:aix:*:*:*:*:* |
| sun | java_system_web_server | 6.1 | cpe:2.3:a:sun:java_system_web_server:6.1:sp6:aix:*:*:*:*:* |
| sun | java_system_web_server | 6.1 | cpe:2.3:a:sun:java_system_web_server:6.1:sp7:aix:*:*:*:*:* |
| sun | java_system_web_server | 6.1 | cpe:2.3:a:sun:java_system_web_server:6.1:sp8:aix:*:*:*:*:* |
| sun | java_system_web_server | 6.1 | cpe:2.3:a:sun:java_system_web_server:6.1:sp9:aix:*:*:*:*:* |
| sun | one_web_server | 6.1 | cpe:2.3:a:sun:one_web_server:6.1:*:aix:*:*:*:*:* |
| sun | one_web_server | 6.1 | cpe:2.3:a:sun:one_web_server:6.1:sp1:aix:*:*:*:*:* |
| sun | one_web_server | 6.1 | cpe:2.3:a:sun:one_web_server:6.1:sp2:aix:*:*:*:*:* |
References
osvdb.org/54872
secunia.com/advisories/35338
sunsolve.sun.com/search/document.do?assetkey=1-21-116648-23-1
sunsolve.sun.com/search/document.do?assetkey=1-66-259588-1
support.avaya.com/elmodocs2/security/ASA-2009-211.htm
www.securityfocus.com/bid/35204
www.securitytracker.com/id?1022334
www.vupen.com/english/advisories/2009/1500
exchange.xforce.ibmcloud.com/vulnerabilities/50951
Related
nessus
nessus
Solaris 5.8 (x86) : 116649-23
2007-10-12 00:00:00
Solaris 5.9 (sparc) : 116649-23
2006-11-06 00:00:00
Solaris 5.10 (x86) : 116649-23
2006-11-06 00:00:00
openvas
openvas
Sun Java System Web Proxy Server Vulnerabilities (Windows)
2009-06-19 00:00:00
Sun Java System Web Proxy Server Vulnerabilities - Windows
2009-06-19 00:00:00
Sun Java System Web Proxy Server 6.1 < 6.1 SP11 XSS Vulnerability
2009-06-19 00:00:00
nvd
nvd
CVE-2009-1934
2009-06-05 16:00:00
prion
prion
Cross site scripting
2009-06-05 16:00:00
cvelist
cvelist
CVE-2009-1934
2009-06-05 15:25:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.003
Percentile
70.5%
Related for CVE-2009-1934