VDB
CVE-2006-2501
CVE-2006-2501
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages.
EPSS 6.44% · 91.2th percentile
Risk Scores
CVSS 2.0
6.800000190734863
EPSS Score
6.44%
91.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| sun | java_system_web_server | 6.1, 6.1, 6.1 |
| sun | one_web_server | 6.0, 6.0, 6.0 |
| sun | one_application_server | 0, 6.0, 7.0 |
| sun | java_system_application_server | 0, 0 |
Timeline
- May 20, 2006 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 1, 2022 CVE Updated
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
References
- 18035 vdb
- 1016125 vdb
- 102164 vendor-advisory
- sun-java-system-xss(26550) vdb
- 20147 third-party-advisory
- 1016126 vdb
- JVN#03D5EAA8 third-party-advisory
- ADV-2006-1866 vdb
- VU#114956 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2006-2501 advisory