CVE-2008-2406: Sun Java Asp Server

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via direct requests on TCP port 5102.

Affected products

• Sun Java Asp Server: up to and including 4.0.2; version 4.0 only

Published 2008-06-04. Last modified 2026-06-16.