Sun One Application Server — known CVE vulnerabilities

Every CVE whose affected-product data names Sun One Application Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2002-0387 — CVSS 7.5 (high): Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to…
• CVE-2004-0826 — CVSS 7.5 (high): Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a…
• CVE-2003-0414 — CVSS 7.2 (high): The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows…
• CVE-2006-6276 — CVSS 6.8 (medium): HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or…
• CVE-2003-0413 — CVSS 6.8 (medium): Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows…
• CVE-2006-2501 — CVSS 6.8 (medium): Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE…
• CVE-2004-1815 — CVSS 5.0 (medium): Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument…
• CVE-2002-1042 — CVSS 5.0 (medium): Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when…
• CVE-2003-0412 — CVSS 5.0 (medium): Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers…
• CVE-2005-4046 — CVSS 4.0 (medium): Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server…
• CVE-2006-5654 — CVSS 4.0 (medium): Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server…
• CVE-2006-3225 — CVSS 2.6 (low): Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before…