Vulnerabilities > SUN > ONE Calendar Server
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2009-04-01 | CVE-2009-1219 | Improper Input Validation vulnerability in SUN Java System Calendar Server and ONE Calendar Server Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter. | 5.0 |
2009-04-01 | CVE-2009-1218 | Cross-Site Scripting vulnerability in SUN Java System Calendar Server and ONE Calendar Server Multiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote attackers to inject arbitrary web script or HTML via (1) the fmt-out parameter to login.wcap or (2) the date parameter to command.shtml. | 4.3 |
2008-06-18 | CVE-2008-2749 | Denial of Service vulnerability in Sun Java System Calendar Server Unspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE Calendar Server 6.0, when access logging (aka service.http.commandlog.all) is enabled, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. network sun | 7.1 |