Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2007-3503

Опубликовано: 28 июн. 2007
Источник: redhat
EPSS Низкий

Описание

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Дополнительная информация

Статус:

Low
Дефект:
CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=246765HTML files generated with Javadoc are vulnerable to a XSS

EPSS

Процентиль: 77%
0.01071
Низкий

Связанные уязвимости

ubuntu
около 18 лет назад

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd
около 18 лет назад

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

debian
около 18 лет назад

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML ...

github
больше 3 лет назад

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

EPSS

Процентиль: 77%
0.01071
Низкий