Sun Java System Communications Express vulnerabilities

5 CVEs affecting Sun Java System Communications Express, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-4456, published 2011-01-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-1729, published 2009-05-21. Medium severity, CVSS 4.3. EPSS: 5.3% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the…
CVE-2005-3472, published 2005-11-03. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files.
CVE-2010-4456, published 2011-01-19. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to affect integrity via unknown vectors related to Web Mail.
CVE-2009-0877, published 2009-03-12. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the (1) Full Name or (2) Subject field.
CVE-2010-1227, published 2010-04-01. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field of a message, as…