CVE-2006-3225: Sun Java System Application Server

Low severity, CVSS 2.6. EPSS: 2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Edition 8.1 2005 Q1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors.

Affected products

• Sun Java System Application Server: up to and including 7.0; version 8.1 only
• Sun One Application Server: up to and including 7.0

Published 2006-06-26. Last modified 2026-06-16.