Sun Java System Communications Express vulnerabilities

3 known vulnerabilities affecting sun/java_system_communications_express.

Total CVEs

3

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2010-4456MEDIUMCVSS 4.3v6.2v6.32011-01-19

CVE-2010-4456 [MEDIUM] CVE-2010-4456: Unspecified vulnerability in Oracle Sun Java System Communications Express 6.2 and 6.3 allows remote Unspecified vulnerability in Oracle Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to affect integrity via unknown vectors related to Web Mail.

CVE-2009-1729MEDIUMCVSS 4.3PoCv6.2v6.32009-05-21

CVE-2009-1729 [MEDIUM] CWE-79 CVE-2009-1729: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005 Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the abperson_displayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Address Book component or (2) the temporaryCalendars par

CVE-2005-3472MEDIUMCVSS 5.0v2004q2v2005q12005-11-03

CVE-2005-3472 [MEDIUM] CVE-2005-3472: Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local a Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files.