CVE-2005-4805 Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to...

MediumCVSS 5.0 EPSS 2.2%

Published: 2006-05-25 13:00
Updated: 2026-06-17 01:19
Exploit status: No public exploit known

Description

Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to obtain the source code for Java Server pages (JSP) via unknown vectors.

Affected products

Product	Affected versions	Fixed in
sun java system application server	= 6.0	No fix listed
sun java system application server	= 7.0	No fix listed
sun java system application server	= 7.0-ur1	No fix listed
sun java system application server	= 7.0-ur2	No fix listed
sun java system application server	= 7.0-ur4	No fix listed
sun java system application server	= 7.0-ur5	No fix listed
sun java system application server	= 7.0-ur6	No fix listed

References

17164 patch third-party-advisory vendor-advisory
1015047 patch vdb-entry
101910 patch vendor-advisory
19950 vdb-entry
15084 patch vdb-entry

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.18% (percentile 82.6)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.