CVE-2006-6276

State: Published
Severity: Not scored
Published: Dec 4, 2006
Updated: Aug 7, 2024
Reserved: Dec 3, 2006

Description

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting (XSS), and poison web caches via unspecified attack vectors.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

102733vendor-advisory
23186third-party-advisory
1017324vdb-entry
sunserver-proxy-csrf(30662)vdb-entry
ADV-2006-4793vdb-entry
21371vdb-entry
1017323vdb-entry
1017322vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.