Sun One Calendar Server vulnerabilities

3 CVEs affecting Sun One Calendar Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-1219, published 2009-04-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-1219, published 2009-04-01. Medium severity, CVSS 5.0. EPSS: 8.7% chance of exploitation in the next 30 days. Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via…
CVE-2009-1218, published 2009-04-01. Medium severity, CVSS 4.3. EPSS: 4.4% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote…
CVE-2008-2749, published 2008-06-18. High severity, CVSS 7.1. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE Calendar Server 6.0, when access logging (aka service.http.commandlog.all) is enabled, allows remote…