CVE-2007-6569

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-12-28 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246.

Affected products

Sun Java System Web Proxy Server: through 4.0.6; 3.6
Sun Java System Web Server: 6.1, 7.0

References

http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view
http://secunia.com/advisories/28186
http://secunia.com/advisories/28216
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1
http://www.securityfocus.com/bid/26978
http://www.vupen.com/english/advisories/2007/4313
http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view
http://secunia.com/advisories/28186
http://secunia.com/advisories/28216
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1
http://www.securityfocus.com/bid/26978
http://www.vupen.com/english/advisories/2007/4313

Get alerted when CVE-2007-6569 or the next vulnerability affects your stack