CVE-2007-1504

Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving web.xml and HTTP 404 and 500 status codes.

• http://jvn.jp/jp/JVN%2383832818/index.htmlThird Party Advisory, VDB Entry
• http://osvdb.org/34276Broken Link
• http://secunia.com/advisories/24508Vendor Advisory
• http://software.fujitsu.com/jp/security/vulnerabilities/jvn-83832818.htmlVendor Advisory
• http://www.fujitsu.com/global/support/software/security/products-f/interstage-200701e.htmlVendor Advisory
• http://www.securityfocus.com/bid/23020Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/0996Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33099VDB Entry
• http://jvn.jp/jp/JVN%2383832818/index.htmlThird Party Advisory, VDB Entry
• http://osvdb.org/34276Broken Link
• http://secunia.com/advisories/24508Vendor Advisory
• http://software.fujitsu.com/jp/security/vulnerabilities/jvn-83832818.htmlVendor Advisory
• http://www.fujitsu.com/global/support/software/security/products-f/interstage-200701e.htmlVendor Advisory
• http://www.securityfocus.com/bid/23020Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/0996Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33099VDB Entry

Published

Mar 19, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1498Multiple stack-based buffer overflows in the SiteManager.Sit…
• CVE-2007-1499Microsoft Internet Explorer 7.0 on Windows XP and Vista allo…
• CVE-2007-1500The Linux Security Auditing Tool (LSAT) allows local users t…
• CVE-2007-1501Stack-based buffer overflow in Avant Browser 11.0 build 26 a…
• CVE-2007-1502Multiple buffer overflows in Rhapsody IRC 0.28b allow remote…
• CVE-2007-1503Multiple format string vulnerabilities in comm.c in Rhapsody…
• CVE-2007-1505Fujitsu FENCE-Pro before V5L01, and Systemwalker Desktop Enc…
• CVE-2007-1506Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.…
• CVE-2007-1507The default configuration in OpenAFS 1.4.x before 1.4.4 and …
• CVE-2007-1508Cross-site scripting (XSS) vulnerability in CMD_USER_STATS i…
• CVE-2007-1509Directory traversal vulnerability in enkrypt.php in Sascha S…
• CVE-2007-1510SQL injection vulnerability in post.php in Particle Blogger …