CVE-2003-0413

N/A Unknown
Published: June 30, 2003 Modified: April 16, 2026
View on NVD

Description

Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java System Web Server 6.1 allows remote attackers to insert arbitrary web script or HTML via an HTTP request that generates an "Invalid JSP file" error, which inserts the text in the resulting error message.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://marc.info/?l=bugtraq&m=105409846029475&w=2
Source: cve@mitre.org
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity
Source: cve@mitre.org
Patch Vendor Advisory
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57605
Source: cve@mitre.org
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201009-1
Source: cve@mitre.org
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
Source: cve@mitre.org
http://www.ciac.org/ciac/bulletins/n-103.shtml
Source: cve@mitre.org
Patch Vendor Advisory
http://www.iss.net/security_center/static/12095.php
Source: cve@mitre.org
Patch Vendor Advisory
http://www.securityfocus.com/bid/7710
Source: cve@mitre.org
Exploit Patch Vendor Advisory
http://www.spidynamics.com/sunone_alert.html
Source: cve@mitre.org
http://marc.info/?l=bugtraq&m=105409846029475&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57605
Source: af854a3a-2127-422b-91ae-364da2661108
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201009-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ciac.org/ciac/bulletins/n-103.shtml
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://www.iss.net/security_center/static/12095.php
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://www.securityfocus.com/bid/7710
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit Patch Vendor Advisory
http://www.spidynamics.com/sunone_alert.html
Source: af854a3a-2127-422b-91ae-364da2661108

18 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.9%
83th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

sun