Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Edition 8.1 2005 Q1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Java_system_application_server | Sun | * | 7.0 (including) |
| Java_system_application_server | Sun | 8.1 (including) | 8.1 (including) |
| One_application_server | Sun | * | 7.0 (including) |