CVE-2007-6571

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-12-28 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6611356.

Affected products

Sun Java System Web Proxy Server: 3.6, 3.6-sp1, 3.6-sp10, 3.6-sp2, 3.6-sp3, 3.6-sp4 (+11)
Sun Java System Web Server: 6.0, 6.0-sp1, 6.0-sp10, 6.0-sp2, 6.0-sp3, 6.0-sp4 (+14)

References

http://secunia.com/advisories/28216
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1
http://www.securityfocus.com/bid/26978
http://www.vupen.com/english/advisories/2007/4313
https://exchange.xforce.ibmcloud.com/vulnerabilities/43977
http://secunia.com/advisories/28216
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1
http://www.securityfocus.com/bid/26978
http://www.vupen.com/english/advisories/2007/4313
https://exchange.xforce.ibmcloud.com/vulnerabilities/43977

Get alerted when CVE-2007-6571 or the next vulnerability affects your stack