Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Summary
Title Sun Alert 256588 A Cross-Site Scripting (XSS) Vulnerability in Sun Java System Portal Server's Error Page May Lead to Execution of Arbitrary Code
Informations
Name SUN-256588 First vendor Publication 2009-05-22
Vendor Sun Last vendor Modification 2009-05-22
Severity (Vendor) N/A Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Cvss Base Score 4.3 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Product: Sun Java System Portal Server 6.3.1 Sun Java System Portal Server 7.1 Sun Java System Portal Server 7.2

A Cross-Site Scripting (XSS) security vulnerability exists in Sun Java System Portal Server within one of its error pages that may allow remote users to execute arbitrary JavaScript code in a user's web browser, which can lead to various impacts including the theft of sensitive information such as cookie information, access to user credentials, or the hijacking of sessions.

State: Resolved
First released: 22-May-2009
Sun Alert Link:http://sunsolve.sun.com/search/document.do?assetkey=1-66-256588-1

Original Source

Url : http://blogs.sun.com/security/entry/sun_alert_256588_a_cross

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-79 Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 12

Open Source Vulnerability Database (OSVDB)

Id Description
54705 Sun Java System Portal Server Unspecified XSS