CVE-2005-0742
Published May 2, 2005
Last updated 15 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:java_system_application_server:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAB26B3D-4DF0-45C2-9ECA-202C829392D4"
},
{
"criteria": "cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D00790CE-CD77-4C39-80AC-5FBD298DD63A"
},
{
"criteria": "cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC5F2280-EC46-4D2F-8402-FE91ECEE6A1A"
},
{
"criteria": "cpe:2.3:a:sun:java_system_application_server:7.0:ur1:enterprise:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F40832C-EA2D-4AEF-9C98-36795D36BA06"
},
{
"criteria": "cpe:2.3:a:sun:java_system_application_server:7.0:ur1:standard:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F076EB9-CE31-456E-B7E9-B9F4C26CB0DC"
},
{
"criteria": "cpe:2.3:a:sun:java_system_application_server:7.0:ur4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60EBC552-FAC2-4833-B1A6-696DC06301A7"
},
{
"criteria": "cpe:2.3:a:sun:java_system_application_server:7.0:ur5:platform:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6F3E897-8253-4D9B-9FA7-83727F508789"
},
{
"criteria": "cpe:2.3:a:sun:java_system_application_server:7.0:ur5:standard:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18ECFDD3-6D45-44F1-BA98-426D86084BA5"
}
],
"operator": "OR"
}
]
}
]