CVE-2009-1934

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.7%
top 28.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SUN Java System WEB ServerSUN ONE WEB Server
Timeline
PublishedJun 5
Latest updateMay 2

Description

Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allows remote attackers to inject arbitrary web script or HTML via the query string in situations that result in a 502 Gateway error.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-wfgr-mjw4-7xpm: Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6↗2022-05-02
▶
CVEList
CVE-2009-1934: Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6↗2009-06-05
▶
CVE-2009-1934 (MEDIUM CVSS 4.3) | Cross-site scripting (XSS) vulnerab | cvebase.io