CVE-2007-1504 Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via...
MediumCVSS 4.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving web.xml and HTTP 404 and 500 status codes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fujitsu interstage application server | = 3.0 | No fix listed |
| fujitsu interstage application server | = 4.0 | No fix listed |
| fujitsu interstage application server | = 5.0 | No fix listed |
| fujitsu interstage application server | = 5.0.1 | No fix listed |
| fujitsu interstage application server | = 6.0 | No fix listed |
| fujitsu interstage application server | = 7.0 | No fix listed |
| fujitsu interstage application server | = 7.0.1 | No fix listed |
| fujitsu interstage application server | = 8.0.0 | No fix listed |
| fujitsu interstage application server | = 8.0.2 | No fix listed |
| fujitsu interstage apworks | = 6.0 | No fix listed |
References
- JVN#83832818 third-party-advisory vdb-entry
- 34276 broken-link vdb-entry
- 24508 third-party-advisory vendor-advisory
- software.fujitsu.com vendor-advisory
- www.fujitsu.com vendor-advisory
- 23020 third-party-advisory vdb-entry
- ADV-2007-0996 third-party-advisory vdb-entry
- interstage-application-servlet-xss(33099) vdb-entry