Sun Java System Portal Server vulnerabilities

6 CVEs affecting Sun Java System Portal Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-4431, published 2011-01-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-5549, published 2008-12-12. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local files and read the product's configuration…
CVE-2009-1796, published 2009-05-26. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to an error page.
CVE-2008-6192, published 2009-02-19. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in unspecified Portlets in Sun Java System Portal Server 7.0 and 7.1 allow remote attackers to inject arbitrary web script or HTML via unknown…
CVE-2007-4289, published 2007-08-09. Medium severity, CVSS 6.8. EPSS: 1.7% chance of exploitation in the next 30 days. Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a…
CVE-2009-4187, published 2009-12-03. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Gateway component in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allow remote attackers to inject arbitrary web script or HTML via…
CVE-2010-4431, published 2011-01-19. Low severity, CVSS 1.0. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Sun Java System Portal Server 7.1 and 7.2 allows local users to affect confidentiality via unknown vectors related to Proxy.