[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foYqAodvHhflIwqwO-VL0nsgeKO19bg9E_cjfvHyLzPg":3,"g5a-ex:sun\u002Fjava_system_application_server@*":131,"g5a-family:sun\u002Fjava_system_application_server":133},{"success":4,"data":5},true,{"product":6,"versions":41,"topVulnerabilitiesByEpss":52,"kevVulnerabilities":108,"seoMetadata":109,"meta":128},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":40},"sun","java_system_application_server",10,22,0,"2012-10-16",[14,18,21,24,27,30,32,34,36,38],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"6.0",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"7.0",8,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"7.1",2,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"8.1",9,{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},"8.2",5,{"version":31,"cve_count":23,"kev_count":11,"has_kev":17},"9.0",{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},"9.0_0.1",{"version":35,"cve_count":23,"kev_count":11,"has_kev":17},"9.1",{"version":37,"cve_count":23,"kev_count":11,"has_kev":17},"9.1_01",{"version":39,"cve_count":16,"kev_count":11,"has_kev":17},"9.1_02","Java System Application Server by Sun is a technology product with 10 tracked versions and 22 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[42,43,44,45,46,47,48,49,50,51],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},{"version":31,"cve_count":23,"kev_count":11,"has_kev":17},{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},{"version":35,"cve_count":23,"kev_count":11,"has_kev":17},{"version":37,"cve_count":23,"kev_count":11,"has_kev":17},{"version":39,"cve_count":16,"kev_count":11,"has_kev":17},[53,60,67,74,79,85,90,95,99,103],{"cveId":54,"description":55,"publishedDate":56,"cvssScore":9,"cvssVersion":57,"severity":58,"isKev":17,"epssScore":59},"CVE-2011-0807","Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.","2011-04-20","v2","Critical",0.60878,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":57,"severity":65,"isKev":17,"epssScore":66},"CVE-2004-0826","Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.","2004-12-31",7.5,"High",0.22525,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":57,"severity":72,"isKev":17,"epssScore":73},"CVE-2008-5266","Cross-site scripting (XSS) vulnerability in configuration\u002FhttpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a different vector than CVE-2008-2751.","2008-11-28",4.3,"Medium",0.05374,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":71,"cvssVersion":57,"severity":72,"isKev":17,"epssScore":78},"CVE-2008-2751","Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1_01 allow remote attackers to inject arbitrary web script or HTML via the (1) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (2) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (3) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, or (4) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc parameter to (a) resourceNode\u002FcustomResourceNew.jsf; the (5) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (6) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (7) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, (8) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiLookupProp:jndiLookup, or (9) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc parameter to (b) resourceNode\u002FexternalResourceNew.jsf; the (10) propertyForm:propertySheet:propertSectionTextField:jndiProp:Jndi, (11) propertyForm:propertySheet:propertSectionTextField:nameProp:name, or (12) propertyForm:propertySheet:propertSectionTextField:descProp:desc parameter to (c) resourceNode\u002FjmsDestinationNew.jsf; the (13) propertyForm:propertySheet:generalPropertySheet:jndiProp:Jndi or (14) propertyForm:propertySheet:generalPropertySheet:descProp:cd parameter to (d) resourceNode\u002FjmsConnectionNew.jsf; the (15) propertyForm:propertySheet:propertSectionTextField:jndiProp:jnditext or (16) propertyForm:propertySheet:propertSectionTextField:descProp:desc parameter to (e) resourceNode\u002FjdbcResourceNew.jsf; the (17) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:nameProp:name, (18) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:classNameProp:classname, or (19) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:loadOrderProp:loadOrder parameter to (f) applications\u002FlifecycleModulesNew.jsf; or the (20) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:jndiProp:name, (21) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:resTypeProp:resType, or (22) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:dbProp:db parameter to (g) resourceNode\u002FjdbcConnectionPoolNew1.jsf.","2008-06-18",0.04812,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":57,"severity":72,"isKev":17,"epssScore":84},"CVE-2006-6276","HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting (XSS), and poison web caches via unspecified attack vectors.","2006-12-04",6.8,0.03637,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":83,"cvssVersion":57,"severity":72,"isKev":17,"epssScore":89},"CVE-2007-5153","Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allows remote attackers to execute arbitrary code via unspecified vectors.","2007-10-01",0.03434,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":83,"cvssVersion":57,"severity":72,"isKev":17,"epssScore":94},"CVE-2006-2501","Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages.","2006-05-20",0.03398,{"cveId":96,"description":97,"publishedDate":88,"cvssScore":64,"cvssVersion":57,"severity":65,"isKev":17,"epssScore":98},"CVE-2007-5152","Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication after a container restart, which allows remote attackers to perform administrative tasks.",0.02825,{"cveId":100,"description":101,"publishedDate":12,"cvssScore":29,"cvssVersion":57,"severity":72,"isKev":17,"epssScore":102},"CVE-2012-3155","Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remote attackers to affect availability, related to CORBA ORB.",0.02531,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":29,"cvssVersion":57,"severity":72,"isKev":17,"epssScore":107},"CVE-2005-4804","Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, and Platform Edition UR1, allows remote attackers to read .jar files via unknown vectors related to deployed web applications.","2005-12-31",0.02367,[],{"title":110,"metaDescription":111,"keywords":112,"structuredData":113},"Java System Application Server by Sun - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Java System Application Server by Sun covering 10 versions with 22 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Java System Application Server vulnerabilities, Java System Application Server security, Java System Application Server CVE, Sun Java System Application Server, Java System Application Server threat intelligence, Sun security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":114,"@type":115,"name":116,"description":111,"url":117,"manufacturer":118,"applicationCategory":122,"softwareVersion":123,"mainEntity":124},"https:\u002F\u002Fschema.org","SoftwareApplication","Java System Application Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsun\u002Fjava_system_application_server",{"@type":119,"name":120,"url":121},"Organization","Sun","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsun","Security Software","10 versions tracked",{"@type":125,"name":126,"description":127,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Java System Application Server Security Vulnerabilities","Security vulnerabilities affecting Java System Application Server by Sun",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":129,"apiVersion":130},"2026-10-17T19:32:39.555Z","3.0",{"rows":132,"total":11,"capped":17,"failed":11},[],[]]