CVE-2006-3225

published 2006-06-26

CVE-2006-3225: Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java…

low 2.6 CVSS 3.1

AV N AC H Au N C N I P A N

Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Edition 8.1 2005 Q1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
sun	java_system_application_server	<= 7.0	—
sun	java_system_application_server	—	—
sun	one_application_server	<= 7.0	—