Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Sun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3716.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun Java系统服务器XSLT处理远程Java方式执行漏洞
Vulnerability Description
Sun Java系统应用服务器是与J2EE平台兼容的应用服务器。 Sun Java在处理恶意XSLT样式表时存在漏洞,远程攻击者可能利用此漏洞控制用户系统。 某些版本的Sun Java系统应用服务器和Sun Java系统Web服务器没有安全地处理XML签名的XSLT转换中的XSLT样式表,这可能允许执行恶意的XLST样式表,导致执行任意Java方式。
CVSS Information
N/A
Vulnerability Type
N/A