CVE-2009-1554

Cross-site scripting (XSS) vulnerability in ThemeServlet.java in Sun Woodstock 4.2, as used in Sun GlassFish Enterprise Server and other products, allows…

published May 6, 2009

CVSS
—
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in ThemeServlet.java in Sun Woodstock 4.2, as used in Sun GlassFish Enterprise Server and other products, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 string in the PATH_INFO, which is displayed on the 404 error page, as demonstrated by the PATH_INFO to theme/META-INF.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04046 · 90.6th percentile
Published
2009-05-06T16:00Z
EPSS history
Timeline
  • 06 MAY 16:00Z
    Cross-site scripting (XSS) vulnerability in ThemeServlet.java in Sun Woodstock 4.2, as used in Sun GlassFish Enterprise Server and other products, allows…
    cvelistv5