Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2003-1573

The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to "inadequate security settings and library bugs in sun.* and org.apache.* packages."

CVSS 2.0 · 10.0 Critical EPSS 5.0% KEV · Not listed
Vendors
Sun
Products
J2ee
CVE-2009-2704

CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing a %00 (encoded null byte).

CVSS 2.0 · 4.3 Medium EPSS 3.9% KEV · Not listed
Vendors
Sun
Products
J2ee
CVE-2009-2705

CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters.

CVSS 2.0 · 4.3 Medium EPSS 4.4% KEV · Not listed
Vendors
Broadcom Sun
Products
Siteminder J2ee