CVE-2007-6570

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-12-28 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309.

Affected products

Sun Java System Web Proxy Server: 3.6, 3.6-sp1, 3.6-sp10, 3.6-sp2, 3.6-sp3, 3.6-sp4 (+11)
Sun Java System Web Server: 6.0, 6.0-sp1, 6.0-sp10, 6.0-sp2, 6.0-sp3, 6.0-sp4 (+14)

References

http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view
http://docs.sun.com/source/820-3637-10/relnotes36sp11_unix.html#wp19247
http://osvdb.org/40851
http://secunia.com/advisories/28186
http://secunia.com/advisories/28216
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1
http://www.securityfocus.com/bid/26978
http://www.vupen.com/english/advisories/2007/4313
https://exchange.xforce.ibmcloud.com/vulnerabilities/43976
http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view
http://docs.sun.com/source/820-3637-10/relnotes36sp11_unix.html#wp19247
http://osvdb.org/40851

Get alerted when CVE-2007-6570 or the next vulnerability affects your stack