Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Sun
Java System Web Server

sun java system web server Vulnerabilities: CVEs, CISA KEV & Security Advisories

32 CVEs

SN

sun java system web server Vulnerabilities

CVE security advisories and vulnerability history for java system web server by sun.

32

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

10

Public exploits

PoC or exploit code

6.1

Avg CVSS

2000–2010

Last updated January 25, 2010

Overview

sun java system web server has 32 published CVE records since 2000, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 10 have a known public exploit. The average CVSS base score across scored CVEs is 6.1. Affected platforms include vulndisco pack.

Severity and exploitation

How the CVSS severity of sun java system web server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High7

Medium19

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of sun java system web server's CVEs are currently listed in CISA's KEV catalog.

Public exploits

10

10 of sun java system web server's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every sun java system web server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

7.0 <= v <= 7.020 CVEs
6.1 <= v <= 6.116 CVEs
6.0 <= v <= 6.09 CVEs
<= 6.13 CVEs
1.1.3 <= v <= 1.1.32 CVEs
2.0 <= v <= 2.02 CVEs
1.1_beta <= v <= 1.1_beta1 CVE
1.1.2 <= v <= 1.1.21 CVE

Find a version

32 CVEs

Sort

Medium vulnerability · 2010-01-25
CVE-2010-0389
Public exploit
Medium · CVSS 5.0
EPSS 1.7% (77th pct)2010-01-25
High vulnerability · 2010-01-25
CVE-2010-0388
Public exploit
CWE-134
High · CVSS 7.5
EPSS 7.2% (94th pct)2010-01-25
High vulnerability · 2010-01-25
CVE-2010-0387
Public exploit
CWE-119
High · CVSS 7.5
EPSS 7.7% (95th pct)2010-01-25
Critical vulnerability · 2010-01-20
CVE-2010-0361
Public exploit
CWE-119
Critical · CVSS 10.0
EPSS 80.4% (100th pct)2010-01-20
Critical vulnerability · 2010-01-20
CVE-2010-0360
Public exploit
CWE-20
Critical · CVSS 10.0
EPSS 3.1% (88th pct)2010-01-20
High vulnerability · 2010-01-08
CVE-2010-0273
Public exploit
High · CVSS 7.5
EPSS 3.6% (89th pct)2010-01-08
High vulnerability · 2010-01-08
CVE-2010-0272
Public exploit
CWE-119
High · CVSS 7.5
EPSS 2.5% (85th pct)2010-01-08
Critical vulnerability · 2009-11-05
CVE-2009-3878CWE-119
Critical · CVSS 9.3
EPSS 2.5% (84th pct)2009-11-05
Medium vulnerability · 2009-08-07
CVE-2009-2713
Medium · CVSS 4.3
EPSS 1.7% (77th pct)2009-08-07
Low vulnerability · 2009-08-07
CVE-2009-2712CWE-264
Low · CVSS 2.1
EPSS 0.4% (29th pct)2009-08-07
Medium vulnerability · 2009-07-13
CVE-2009-2445
Public exploit
CWE-200
Medium · CVSS 5.0
EPSS 2.5% (85th pct)2009-07-13
Medium vulnerability · 2009-06-05
CVE-2009-1934CWE-79
Medium · CVSS 4.3
EPSS 2.2% (82th pct)2009-06-05
Medium vulnerability · 2008-06-03
CVE-2008-2518CWE-79
Medium · CVSS 4.3
EPSS 1.9% (79th pct)2008-06-03
Medium vulnerability · 2008-05-13
CVE-2008-2166CWE-79
Medium · CVSS 4.3
EPSS 1.9% (79th pct)2008-05-13
Medium vulnerability · 2008-05-09
CVE-2008-2120CWE-200
Medium · CVSS 5.0
EPSS 2.2% (83th pct)2008-05-09
Medium vulnerability · 2007-12-28
CVE-2007-6572CWE-79
Medium · CVSS 4.3
EPSS 1.7% (76th pct)2007-12-28
Medium vulnerability · 2007-12-28
CVE-2007-6571CWE-79
Medium · CVSS 4.3
EPSS 1.7% (76th pct)2007-12-28
Medium vulnerability · 2007-12-28
CVE-2007-6570CWE-79
Medium · CVSS 4.3
EPSS 2.2% (82th pct)2007-12-28
Medium vulnerability · 2007-12-28
CVE-2007-6569CWE-79
Medium · CVSS 4.3
EPSS 1.9% (79th pct)2007-12-28
High vulnerability · 2007-08-07
CVE-2007-4164
High · CVSS 7.5
EPSS 2.5% (84th pct)2007-08-07
Critical vulnerability · 2007-07-11
CVE-2007-3715CWE-20
Critical · CVSS 9.3
EPSS 2.3% (83th pct)2007-07-11
Medium vulnerability · 2007-03-20
CVE-2007-1526
Medium · CVSS 6.0
EPSS 1.0% (61th pct)2007-03-20
High vulnerability · 2007-03-16
CVE-2007-1488
High · CVSS 7.5
EPSS 2.6% (85th pct)2007-03-16
Medium vulnerability · 2006-12-04
CVE-2006-6276CWE-444
Medium · CVSS 6.8
EPSS 3.6% (89th pct)2006-12-04
Medium vulnerability · 2006-11-03
CVE-2006-5654
Medium · CVSS 4.0
EPSS 2.1% (81th pct)2006-11-03
Medium vulnerability · 2006-07-28
CVE-2006-3921
Medium · CVSS 4.0
EPSS 2.2% (82th pct)2006-07-28
Medium vulnerability · 2006-05-20
CVE-2006-2501
Medium · CVSS 6.8
EPSS 3.4% (89th pct)2006-05-20
Medium vulnerability · 2005-07-17
CVE-2004-2216
Medium · CVSS 5.0
EPSS 1.6% (76th pct)2005-07-17
Medium vulnerability · 2005-06-08
CVE-2005-1889
Medium · CVSS 5.0
EPSS 1.0% (62th pct)2005-06-08
Medium vulnerability · 2005-04-16
CVE-2005-1150
Medium · CVSS 5.0
EPSS 1.8% (78th pct)2005-04-16

Showing 30 of 32

Common weakness types

The CWE weakness categories most often found in sun java system web server CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-2641 CVE
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVE
CWE-134Use of Externally-Controlled Format String1 CVE

Disclosure activity by year

How many sun java system web server CVEs were published each year.

2000

2

2005

3

2006

4

2007

8

2008

3

2009

5

2010

7

Other sun products

Browse vulnerabilities for other products by sun.

sunos609 CVEs solaris545 CVEs jre426 CVEs jdk395 CVEs sdk127 CVEs opensolaris115 CVEs java system application server22 CVEs java se21 CVEs

All sun vulnerabilities

Frequently asked questions

Common questions about sun java system web server vulnerabilities.

How many CVEs does sun java system web server have?: sun java system web server has 32 published CVE records since 2000.
How many sun java system web server CVEs are in CISA KEV?: None of sun java system web server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for sun java system web server vulnerabilities?: Yes — 10 of sun java system web server's CVEs have a known public exploit.
Which versions of sun java system web server are affected?: 8 distinct sun java system web server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in sun java system web server CVEs?: sun java system web server's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-20 (Improper Input Validation).
How many critical sun java system web server vulnerabilities are there?: sun java system web server has 5 critical and 7 high-severity CVEs.
What is the average severity of sun java system web server CVEs?: The average CVSS base score across sun java system web server's scored CVEs is 6.1.

References

All sun vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track sun java system web server vulnerabilities

Get an alert for each new sun java system web server CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References