CVE-2003-0413
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
87.5%
Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java System Web Server 6.1 allows remote attackers to insert arbitrary web script or HTML via an HTTP request that generates an “Invalid JSP file” error, which inserts the text in the resulting error message.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sun | one_application_server | 7.0 | cpe:2.3:a:sun:one_application_server:7.0:*:*:*:*:*:*:* |
References
marc.info/?l=bugtraq&m=105409846029475&w=2
sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity
sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57605
sunsolve.sun.com/search/document.do?assetkey=1-66-201009-1
sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
www.ciac.org/ciac/bulletins/n-103.shtml
www.iss.net/security_center/static/12095.php
www.securityfocus.com/bid/7710
www.spidynamics.com/sunone_alert.html
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
87.5%