Title: Sun Java System Portal Server Portlets Cross-Site Scripting Vulnerability
Severity: MODERATE
Description:
Sun Java System Portal Server is a Java-based framework for developing web applications.
Some unspecified Portlets bundeled with Sun Java System Portal Server are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
Very few details are currently known about this issue. We will update this BID when more information becomes available.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of an affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Sun Java System Portal Server 7.0 and 7.1 are affected.
Affected Products:
- Sun Java System Portal Server 7
- Sun Java System Portal Server 7.0
- Sun Java System Portal Server 7.1
References:
- Sun Microsystems: Sun Alert 239308 Cross Site Scripting (XSS) Vulnerability in Sun Java System Por
- Sun Microsystems: Sun Java System Portal Server Homepage