CVE-2006-5486 Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via cra...
MediumCVSS 4.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun iplanet messaging server | = 5.2 | No fix listed |
| sun java system messaging server | = 6.0 | No fix listed |
| sun java system messaging server | = 6.1 | No fix listed |
| sun java system messaging server | = 6.2 | No fix listed |
References
- 22575 third-party-advisory vendor-advisory
- 1017113 vdb-entry
- 102497 patch vendor-advisory
- 20708 vdb-entry
- ADV-2006-4183 vdb-entry
- java-webmail-xss(29806) vdb-entry