CVE-2007-4289

4 documents4 sources
Severity
6.8MEDIUM
EPSS
0.8%
top 25.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN Java System Portal Server
Timeline
PublishedAug 9
Latest updateMay 1

Description

Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3715.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: sunsolve.sun.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-vccg-86m6-wf86: Sun Java System Portal Server 7↗2022-05-01
▶
CVEList
CVE-2007-4289: Sun Java System Portal Server 7↗2007-08-09
▶

💬Community

1
Bugzilla
CVE-2007-6035 cacti SQL injection vulnerability↗2007-11-20
▶
CVE-2007-4289 (MEDIUM CVSS 6.8) | Sun Java System Portal Server 7.0 d | cvebase.io