Sign inStart freeBook a demo

Java System Application Server vulnerabilitiesRanked by how likely they are to be used.

Product10 versions
The short answer

Java System Application Server is made by Sun. We track 22 published vulnerabilities in it, across 10 versions. None of them is on the list of flaws known to be exploited today. If you run Java System Application Server, keep it on a version the vendor still supports.

See the riskiest flaws

We keep watching the known-exploited list.

Known exploited

Which Java System Application Server vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Java System Application Server's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Java System Application Server flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 61%
    CVE-2011-0807Critical

    Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability...

    CVSS10.0Published20 Apr 2011
  2. 23%
    CVE-2004-0826High

    Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.

    CVSS7.5Published31 Dec 2004
  3. 5.4%
    CVE-2008-5266Medium

    Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows...

    CVSS4.3Published28 Nov 2008
  4. 4.8%
    CVE-2008-2751Medium

    Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1_01 allow remote attackers to inject arbitrary web script or HTML via the (1)...

    CVSS4.3Published18 Jun 2008
  5. 3.6%
    CVE-2006-6276Medium

    HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request...

    CVSS6.8Published4 Dec 2006
  6. 3.4%
    CVE-2007-5153Medium

    Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allows remote attackers to execute arbitrary code via unspecified vectors.

    CVSS6.8Published1 Oct 2007
  7. 3.4%
    CVE-2006-2501Medium

    Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and...

    CVSS6.8Published20 May 2006
  8. 2.8%
    CVE-2007-5152High

    Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication after a container restart, which allows remote attackers to perform...

    CVSS7.5Published1 Oct 2007
  9. 2.5%
    CVE-2012-3155Medium

    Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remote attackers to...

    CVSS5.0Published16 Oct 2012
  10. 2.4%
    CVE-2005-4804Medium

    Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, and Platform Edition UR1, allows remote attackers to read .jar files via unknown vectors related to...

    CVSS5.0Published31 Dec 2005
Precursor Intelligence

Running Java System Application Server? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 22 published vulnerabilities listed under the name Java System Application Server, across 10 versions.

None of Java System Application Server's vulnerabilities is on the list of flaws known to be exploited today.

Create a Precursor Intelligence account and track Java System Application Server. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.

Keep exploring