CVE-2007-3503: Oracle JDK

Medium severity, CVSS 4.3. EPSS: 3.1% chance of exploitation in the next 30 days.

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Oracle JDK: version 1.5.0 only; version 1.6.0 only

Published 2007-06-30. Last modified 2026-06-16.