CVE-2007-1681: Sun Java Web Console

High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days.

Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service (application crash), obtain sensitive information, and possibly execute arbitrary code via unspecified vectors during a failed login attempt, related to syslog.

Affected products

• Sun Java Web Console: version 2.2.2 only; version 2.2.3 only; version 2.2.4 only; version 2.2.5 only
• Sun Solaris: version 10.0 only

Published 2007-04-19. Last modified 2026-06-16.