CVE-2008-2401: Sun Java Active Server

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing files via the first argument to a certain file that is included by multiple unspecified ASP applications.

Affected products

• Sun Java Active Server: version 4.0.2 only

Published 2008-06-04. Last modified 2026-06-16.