CVE-2006-5486

medium

Description

Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/29806

http://www.vupen.com/english/advisories/2006/4183

http://www.securityfocus.com/bid/20708

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102497-1

http://securitytracker.com/id?1017113

http://secunia.com/advisories/22575

Details

Source: Mitre, NVD

Published: 2006-10-24

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N