CVE-2006-5654: Sun Java System Web Server

Medium severity, CVSS 4.0. EPSS: 2.1% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3, when SSLv2 is enabled, allows remote authenticated users to cause a denial of service (application crash) via unspecified vectors. NOTE: due to lack of details from the vendor, it is unclear whether this is related to vector 1 in CVE-2006-5201 or CVE-2006-3127.

Affected products

• Sun Java System Web Server: version 6.0 only
• Sun One Application Server: up to and including 7.0

Published 2006-11-03. Last modified 2026-06-16.