Sun Java System Calendar Server vulnerabilities

4 CVEs affecting Sun Java System Calendar Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-1219, published 2009-04-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-1219, published 2009-04-01. Medium severity, CVSS 5.0. EPSS: 8.7% chance of exploitation in the next 30 days. Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via…
CVE-2004-0742, published 2004-07-27. High severity, CVSS 10.0. EPSS: 4.5% chance of exploitation in the next 30 days. Sun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default…
CVE-2009-1218, published 2009-04-01. Medium severity, CVSS 4.3. EPSS: 4.4% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote…
CVE-2008-2749, published 2008-06-18. High severity, CVSS 7.1. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE Calendar Server 6.0, when access logging (aka service.http.commandlog.all) is enabled, allows remote…