CVE-2006-5486
published 2006-10-24CVE-2006-5486: Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote…
PriorityP418medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.93%
77.7th percentile
Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sun | iplanet_messaging_server | — | — |
| sun | java_system_messaging_server | — | — |
| sun | java_system_messaging_server | — | — |
| sun | java_system_messaging_server | — | — |
| sun | java_system_messenger_express | — | — |
| sun | one_messaging_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c678-jhc7-f2wf: Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via
ghsa_unreviewed·2022-05-01·CVSS 4.3
CVE-2006-5652 [MEDIUM] GHSA-c678-jhc7-f2wf: Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via
Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated by setting the width style for an IMG element. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of the initial advisory and different researchers, it has been assigned a new CVE.
GHSA
GHSA-pmv3-qwww-mxmr: Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6
ghsa_unreviewed·2022-05-01
CVE-2006-5486 [MEDIUM] CWE-79 GHSA-pmv3-qwww-mxmr: Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6
Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages.
GHSA
GHSA-g6hq-gv45-xmqw: Cross-site scripting (XSS) vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers
ghsa_unreviewed·2022-05-01·CVSS 4.3
CVE-2006-5653 [MEDIUM] GHSA-g6hq-gv45-xmqw: Cross-site scripting (XSS) vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers
Cross-site scripting (XSS) vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of the initial advisory and different researchers a new CVE was assigned.
GHSA
GHSA-xf68-pxg8-qfjf: Webmail in Sun ONE Messaging Server 6
ghsa_unreviewed·2022-04-29·CVSS 4.3
CVE-2004-2766 [MEDIUM] CWE-200 GHSA-xf68-pxg8-qfjf: Webmail in Sun ONE Messaging Server 6
Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail message, related to a "session hijacking" issue, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.
GHSA
GHSA-547m-mqmc-2jqg: Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6
ghsa_unreviewed·2022-04-29·CVSS 4.3
CVE-2004-2765 [MEDIUM] CWE-79 GHSA-547m-mqmc-2jqg: Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6
Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/22575http://securitytracker.com/id?1017113http://sunsolve.sun.com/search/document.do?assetkey=1-26-102497-1http://www.securityfocus.com/bid/20708http://www.vupen.com/english/advisories/2006/4183https://exchange.xforce.ibmcloud.com/vulnerabilities/29806http://secunia.com/advisories/22575http://securitytracker.com/id?1017113http://sunsolve.sun.com/search/document.do?assetkey=1-26-102497-1http://www.securityfocus.com/bid/20708http://www.vupen.com/english/advisories/2006/4183https://exchange.xforce.ibmcloud.com/vulnerabilities/29806
2006-10-24
Published