CVE-2009-1796

Cross-site scripting (XSS) vulnerability in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to an error page.

• CWE-79

• http://osvdb.org/54705
• http://secunia.com/advisories/35221
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-118950-38-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-256588-1Patch, Vendor Advisory
• http://www.securityfocus.com/bid/35082Patch
• http://www.securitytracker.com/id?1022273
• http://www.vupen.com/english/advisories/2009/1411
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50704
• http://osvdb.org/54705
• http://secunia.com/advisories/35221
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-118950-38-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-256588-1Patch, Vendor Advisory
• http://www.securityfocus.com/bid/35082Patch
• http://www.securitytracker.com/id?1022273
• http://www.vupen.com/english/advisories/2009/1411
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50704

Published

May 26, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1787Multiple SQL injection vulnerabilities in PHP Dir Submit (ak…
• CVE-2009-1788Heap-based buffer overflow in voc_read_header in libsndfile …
• CVE-2009-1789mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6…
• CVE-2009-1790Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees…
• CVE-2009-1791Heap-based buffer overflow in aiff_read_header in libsndfile…
• CVE-2009-1792The system.openURL function in StoneTrip Ston3D StandalonePl…
• CVE-2009-1797Multiple cross-site request forgery (CSRF) vulnerabilities o…
• CVE-2009-1798Multiple cross-site scripting (XSS) vulnerabilities on the N…
• CVE-2009-1799Multiple SQL injection vulnerabilities in the getGalleryImag…
• CVE-2009-1800Stack-based buffer overflow in the Chinagames CGAgent Active…
• CVE-2009-1801Multiple cross-site scripting (XSS) vulnerabilities in FreeP…
• CVE-2009-1802Multiple cross-site request forgery (CSRF) vulnerabilities i…