CVE-2008-2120: Sun Java System Application Server

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to obtain source code of JSP files via unknown vectors.

Affected products

• Sun Java System Application Server: up to and including 7.0
• Sun Java System Web Server: up to and including 6.1; version 7.0 only

Published 2008-05-09. Last modified 2026-06-16.