[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3jxSPgWtykImzpEpVf_XpwHl0kmyZcdEgp_B5BS6BF8":3,"g5a-ex:sun\u002Fjava_system_web_server@*":121,"g5a-family:sun\u002Fjava_system_web_server":123},{"success":4,"data":5},true,{"product":6,"versions":35,"topVulnerabilitiesByEpss":43,"kevVulnerabilities":98,"seoMetadata":99,"meta":118},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":34},"sun","java_system_web_server",7,32,0,"2010-01-25",[14,18,21,23,25,28,31],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.1.2",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"1.1.3",2,{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},"1.1_beta",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"2.0",{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},"6.0",9,{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},"6.1",16,{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},"7.0",20,"Java System Web Server by Sun is a technology product with 7 tracked versions and 32 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[36,37,38,39,40,41,42],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},[44,52,58,62,67,72,79,84,89,93],{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":49,"severity":50,"isKev":17,"epssScore":51},"CVE-2010-0361","Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request.","2010-01-20",10,"v2","Critical",0.80387,{"cveId":53,"description":54,"publishedDate":12,"cvssScore":55,"cvssVersion":49,"severity":56,"isKev":17,"epssScore":57},"CVE-2010-0387","Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long string in an \"Authorization: Digest\" HTTP header.",7.5,"High",0.077,{"cveId":59,"description":60,"publishedDate":12,"cvssScore":55,"cvssVersion":49,"severity":56,"isKev":17,"epssScore":61},"CVE-2010-0388","Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in the encoding attribute of the XML declaration in a PROPFIND request.",0.07184,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":48,"cvssVersion":49,"severity":50,"isKev":17,"epssScore":66},"CVE-2000-0812","The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a \u002Fservlet\u002F tag.","2000-11-14",0.0601,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":55,"cvssVersion":49,"severity":56,"isKev":17,"epssScore":71},"CVE-2000-0629","The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet.","2000-07-12",0.03761,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":49,"severity":77,"isKev":17,"epssScore":78},"CVE-2006-6276","HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting (XSS), and poison web caches via unspecified attack vectors.","2006-12-04",6.8,"Medium",0.03637,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":55,"cvssVersion":49,"severity":56,"isKev":17,"epssScore":83},"CVE-2010-0273","Unspecified vulnerability in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to execute arbitrary code by sending a process memory address and crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco.  NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.","2010-01-08",0.03573,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":76,"cvssVersion":49,"severity":77,"isKev":17,"epssScore":88},"CVE-2006-2501","Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages.","2006-05-20",0.03398,{"cveId":90,"description":91,"publishedDate":47,"cvssScore":48,"cvssVersion":49,"severity":50,"isKev":17,"epssScore":92},"CVE-2010-0360","Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an \"overflow.\" NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273.",0.03138,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":55,"cvssVersion":49,"severity":56,"isKev":17,"epssScore":97},"CVE-2007-1488","Unspecified vulnerability in Sun Java System Web Server 6.0 and 6.1 before 20070315 allows remote attackers to \"gain unauthorized access to data\", possibly involving a sample application.","2007-03-16",0.02627,[],{"title":100,"metaDescription":101,"keywords":102,"structuredData":103},"Java System Web Server by Sun - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Java System Web Server by Sun covering 7 versions with 32 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Java System Web Server vulnerabilities, Java System Web Server security, Java System Web Server CVE, Sun Java System Web Server, Java System Web Server threat intelligence, Sun security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":104,"@type":105,"name":106,"description":101,"url":107,"manufacturer":108,"applicationCategory":112,"softwareVersion":113,"mainEntity":114},"https:\u002F\u002Fschema.org","SoftwareApplication","Java System Web Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsun\u002Fjava_system_web_server",{"@type":109,"name":110,"url":111},"Organization","Sun","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsun","Security Software","7 versions tracked",{"@type":115,"name":116,"description":117,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Java System Web Server Security Vulnerabilities","Security vulnerabilities affecting Java System Web Server by Sun",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":119,"apiVersion":120},"2026-10-17T19:32:55.258Z","3.0",{"rows":122,"total":11,"capped":17,"failed":11},[],[124],{"product":125,"cves":16},"java_system_web_server_plugin"]