CVE-2004-2216: Sun Java System Application Server

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote attackers to cause a denial of service (crash) via a malformed client certificate.

Affected products

• Sun Java System Application Server: version 7.0 only
• Sun Java System Web Server: version 6.0 only; version 6.1 only

Published 2004-12-31. Last modified 2026-06-16.