Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-1504

Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving web.xml and HTTP 404 and 500 status codes.

Published

2007-03-19T22:19:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	fujitsu	interstage_application_server	3.0	Yes
Application	fujitsu	interstage_application_server	3.0	Yes
Application	fujitsu	interstage_application_server	4.0	Yes
Application	fujitsu	interstage_application_server	4.0	Yes
Application	fujitsu	interstage_application_server	4.0	Yes
Application	fujitsu	interstage_application_server	5.0	Yes
Application	fujitsu	interstage_application_server	5.0	Yes
Application	fujitsu	interstage_application_server	5.0	Yes
Application	fujitsu	interstage_application_server	5.0.1	Yes
Application	fujitsu	interstage_application_server	6.0	Yes
Application	fujitsu	interstage_application_server	7.0	Yes
Application	fujitsu	interstage_application_server	7.0	Yes
Application	fujitsu	interstage_application_server	7.0	Yes
Application	fujitsu	interstage_application_server	7.0.1	Yes
Application	fujitsu	interstage_application_server	7.0.1	Yes
Application	fujitsu	interstage_application_server	8.0.0	Yes
Application	fujitsu	interstage_application_server	8.0.0	Yes
Application	fujitsu	interstage_application_server	8.0.2	Yes
Application	fujitsu	interstage_application_server	8.0.2	Yes
Application	fujitsu	interstage_apworks	6.0	Yes

References

http://jvn.jp/jp/JVN%2383832818/index.html Third Party Advisory, VDB Entry ([email protected])
http://osvdb.org/34276 Broken Link ([email protected])
http://secunia.com/advisories/24508 Vendor Advisory ([email protected])
http://software.fujitsu.com/jp/security/vulnerabilities/jvn-83832818.html Vendor Advisory ([email protected])
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200701e.html Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/23020 Third Party Advisory, VDB Entry ([email protected])
http://www.vupen.com/english/advisories/2007/0996 Third Party Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/33099 VDB Entry ([email protected])
http://jvn.jp/jp/JVN%2383832818/index.html Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://osvdb.org/34276 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24508 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://software.fujitsu.com/jp/security/vulnerabilities/jvn-83832818.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200701e.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/23020 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/0996 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/33099 VDB Entry (af854a3a-2127-422b-91ae-364da2661108)