Intrusion PreventionSun.Java.Calendar.Server.Command.Shtml.XSS
Description
This indicates an attempt to exploit a cross site scripting (XSS) vulnerability in Sun Java system calendar server.
The vulnerability is due to input validation errors when processing the "date" parameter. It can be exploited by attackers to cause malicious script code to be executed by the user's browser.
Affected Products
Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0
Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01
Impact
System Compromise: remote script execution.
Recommended Actions
Apply the update from the vendor.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-01-11 | 16.995 |
| ID | 26791 |
| Created | May 17, 2011 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2009-1218 |
| Exploit Prediction Score | 0.63% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | SUN |