Vulnerabilities > SUN > Java System Application Server > Critical

DATE CVE VULNERABILITY TITLE RISK
2011-04-20 CVE-2011-0807 Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.
network
low complexity
oracle sun
critical
10.0
2007-07-11 CVE-2007-3715 Improper Input Validation vulnerability in SUN products
Sun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3716.
network
sun CWE-20
critical
9.3