Sun Java System Portal Server vulnerabilities

6 vulnerabilities

Known vulnerabilities in Sun Java System Portal Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.8CVE-2007-4289sunjava_system_portal_server
EPSS score
1.67%
Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3715.5CVE-2008-5549sunjava_system_portal_server
EPSS score
2.29%
Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local files and read the product's configuration information via unknown vectors related to "access to secure files by ThemeServlet."4.3CVE-2008-6192sunjava_system_portal_server
EPSS score
1.90%
Multiple cross-site scripting (XSS) vulnerabilities in unspecified Portlets in Sun Java System Portal Server 7.0 and 7.1 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.1CVE-2010-4431sunjava_system_portal_server
EPSS score
0.29%
Unspecified vulnerability in Oracle Sun Java System Portal Server 7.1 and 7.2 allows local users to affect confidentiality via unknown vectors related to Proxy.4.3CVE-2009-1796sunjava_system_portal_server
EPSS score
1.98%
Cross-site scripting (XSS) vulnerability in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to an error page.4.3CVE-2009-4187sunjava_system_portal_server
EPSS score
1.66%
Multiple cross-site scripting (XSS) vulnerabilities in the Gateway component in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.