J2ee

j2ee

Vendor: Sun • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-2705 2Broadcom Sun 2J2ee Siteminder Apr 23, 2026 Aug 11, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters.
CVE-2009-2704 1Sun 1J2ee Apr 23, 2026 Aug 11, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing a %00 (encoded null byte).
CVE-2003-1573 1Sun 1J2ee Apr 23, 2026 Jun 1, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted S...Show more The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to "inadequate security settings and library bugs in sun.* and org.apache.* packages."Show less