Sun Java System Portal Server — known CVE vulnerabilities

Every CVE whose affected-product data names Sun Java System Portal Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2007-4289 — CVSS 6.8 (medium): Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows…
• CVE-2008-5549 — CVSS 5.0 (medium): Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to…
• CVE-2008-6192 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in unspecified Portlets in Sun Java System Portal Server 7.0 and 7.1 allow remote…
• CVE-2009-1796 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allows remote attackers to inject arbitrary…
• CVE-2009-4187 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in the Gateway component in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allow…
• CVE-2010-4431 — CVSS 1.0 (low): Unspecified vulnerability in Oracle Sun Java System Portal Server 7.1 and 7.2 allows local users to affect confidentiality via unknown…