CVE-2007-1504

Published: Mar 19, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving web.xml and HTTP 404 and 500 status codes.

Affected (20)

Products: Fujitsu: Interstage Application Server, Interstage Apworks

Fujitsu

2 products

Interstage Application Server

Interstage Apworks

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Fujitsu Interstage Application Server	Version 3.0
Fujitsu Interstage Application Server	Version 3.0
Fujitsu Interstage Application Server	Version 4.0
Fujitsu Interstage Application Server	Version 4.0
Fujitsu Interstage Application Server	Version 4.0
Fujitsu Interstage Application Server	Version 5.0.1
Fujitsu Interstage Application Server	Version 5.0
Fujitsu Interstage Application Server	Version 5.0
Fujitsu Interstage Application Server	Version 5.0
Fujitsu Interstage Application Server	Version 6.0
Fujitsu Interstage Application Server	Version 7.0.1
Fujitsu Interstage Application Server	Version 7.0.1
Fujitsu Interstage Application Server	Version 7.0
Fujitsu Interstage Application Server	Version 7.0
Fujitsu Interstage Application Server	Version 7.0
Fujitsu Interstage Application Server	Version 8.0.0
Fujitsu Interstage Application Server	Version 8.0.0
Fujitsu Interstage Application Server	Version 8.0.2
Fujitsu Interstage Application Server	Version 8.0.2
Fujitsu Interstage Apworks	Version 6.0