CVE-2005-4805

Опубликовано: 31 дек. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to obtain the source code for Java Server pages (JSP) via unknown vectors.

Ссылки

http://secunia.com/advisories/17164
Patch
Vendor Advisory
http://securitytracker.com/id?1015047
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101910-1
Patch
http://www.osvdb.org/19950
http://www.securityfocus.com/bid/15084
Patch
http://secunia.com/advisories/17164
Patch
Vendor Advisory
http://securitytracker.com/id?1015047
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101910-1
Patch
http://www.osvdb.org/19950
http://www.securityfocus.com/bid/15084
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sun:java_system_application_server:6.0:*:platform:*:*:*:*:*

cpe:2.3:a:sun:java_system_application_server:7.0:*:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_application_server:7.0:*:enterprise:*:*:*:*:*

cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*

cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*

cpe:2.3:a:sun:java_system_application_server:7.0:ur1:standard:*:*:*:*:*

cpe:2.3:a:sun:java_system_application_server:7.0:ur2:platform:*:*:*:*:*

cpe:2.3:a:sun:java_system_application_server:7.0:ur2:standard:*:*:*:*:*

cpe:2.3:a:sun:java_system_application_server:7.0:ur4:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_application_server:7.0:ur5:platform:*:*:*:*:*

cpe:2.3:a:sun:java_system_application_server:7.0:ur5:standard:*:*:*:*:*

cpe:2.3:a:sun:java_system_application_server:7.0:ur6:platform:*:*:*:*:*

cpe:2.3:a:sun:java_system_application_server:7.0:ur6:standard:*:*:*:*:*

EPSS

Процентиль: 66%

0.0052

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-q49m-mm5c-vjj3

github

почти 4 года назад