CVE-2009-1796

medium

Description

Cross-site scripting (XSS) vulnerability in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to an error page.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/50704

http://www.vupen.com/english/advisories/2009/1411

http://www.securitytracker.com/id?1022273

http://www.securityfocus.com/bid/35082

http://sunsolve.sun.com/search/document.do?assetkey=1-66-256588-1

http://sunsolve.sun.com/search/document.do?assetkey=1-21-118950-38-1

http://secunia.com/advisories/35221

http://osvdb.org/54705

Details

Source: Mitre, NVD

Published: 2009-05-26

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N