CVE Vulnerabilities

CVE-2007-2904

Published: May 30, 2007 | Modified: Apr 09, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Cross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.0 through 6.3, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a related issue to CVE-2006-5653.

Affected Software

NameVendorStart VersionEnd Version
Java_system_messaging_serverSun6.0 (including)6.0 (including)
Java_system_messaging_serverSun6.1 (including)6.1 (including)
Java_system_messaging_serverSun6.2 (including)6.2 (including)
Java_system_messaging_serverSun6.3 (including)6.3 (including)

References