CVE-2006-2501

Published: May 20, 2006Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages.

Affected (20)

Products: Sun: Java System Application Server, Java System Web Server, One Application Server, One Web Server

Sun

4 products

Java System Application Server

Java System Web Server

One Application Server

One Web Server

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Sun Java System Application Server	version ≤ 7.0
Sun Java System Application Server	version ≤ 7.0
Sun Java System Web Server	version ≤ 6.1
Sun Java System Web Server	Version 6.1
Sun Java System Web Server	Version 6.1 sp1
Sun Java System Web Server	Version 6.1 sp2
Sun Java System Web Server	Version 6.1 sp3
Sun One Application Server	version ≤ 7.0
Sun One Application Server	version ≤ 7.0
Sun One Application Server	Version 6.0
Sun One Application Server	Version 6.0 sp1
Sun One Application Server	Version 6.0 sp2
Sun One Application Server	Version 7.0
Sun One Application Server	Version 7.0
Sun One Web Server	version ≤ 6.0
Sun One Web Server	Version 6.0 sp3
Sun One Web Server	Version 6.0 sp4
Sun One Web Server	Version 6.0 sp5
Sun One Web Server	Version 6.0 sp7
Sun One Web Server	Version 6.0 sp8