VendorsSunj2eeall versions
Vulnerabilities

Sun j2ee

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2003-1573
The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to "inadequate security settings and library bugs in sun.* and org.apache.* packages."
Published 2009-06-01 · Modified
10.0EPSS 0.050
CVE-2009-2705
CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters.
Published 2009-08-11 · Modified
4.31 PoCEPSS 0.044
CVE-2009-2704
CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing a %00 (encoded null byte).
Published 2009-08-11 · Modified
4.31 PoCEPSS 0.039