Total vulnerabilities in the database
Cross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search/advanced.jsp) in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter.
| Software | From | Fixed in |
|---|---|---|
| sun / java_system_web_server | 6.1-sp1 | 6.1-sp1.x |
| sun / java_system_web_server | 6.1-sp6 | 6.1-sp6.x |
| sun / java_system_web_server | 6.1-sp3 | 6.1-sp3.x |
| sun / java_system_web_server | 7.0-update_1 | 7.0-update_1.x |
| sun / java_system_web_server | 6.1 | 6.1.x |
| sun / java_system_web_server | 6.1-sp4 | 6.1-sp4.x |
| sun / java_system_web_server | 6.1-sp5 | 6.1-sp5.x |
| sun / java_system_web_server | 7.0 | 7.0.x |
| sun / java_system_web_server | 6.1-sp8 | 6.1-sp8.x |
| sun / java_system_web_server | 7.0-update_2 | 7.0-update_2.x |
| sun / java_system_web_server | 6.1-sp2 | 6.1-sp2.x |
| sun / java_system_web_server | 6.1-sp7 | 6.1-sp7.x |