{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Sun Java System Application Server Enterprise Edition 2004Q2.",
      "product": {
        "name": "Web",
        "vendor": {
          "name": "Centreon",
          "scada": false
        }
      }
    },
    {
      "description": "Sun Java System Application Server Standard Edition 2004Q2 ;",
      "product": {
        "name": "Web",
        "vendor": {
          "name": "Centreon",
          "scada": false
        }
      }
    },
    {
      "description": "Sun Java System Web Server 7.0 ;",
      "product": {
        "name": "Web",
        "vendor": {
          "name": "Centreon",
          "scada": false
        }
      }
    },
    {
      "description": "Sun Java System Web Server 6.1 ;",
      "product": {
        "name": "Web",
        "vendor": {
          "name": "Centreon",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 de type injection de code indirecte (cross-site\nscripting) affecte Sun Java System Web Server. Une autre vuln\u00e9rabilit\u00e9\naffectant Sun Java System Application Server et Web Server permet \u00e0 une\npersonne malintentionn\u00e9e de visualiser le code source de certaines pages\nJSP.\n\n## Solution\n\nSe r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2008-05-09T00:00:00",
  "last_revision_date": "2008-05-09T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Sun Solaris #201255 du 08 mai 2008 :",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201255-1"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Sun Solaris #231467 du 06 mai 2008 :",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-231467-1"
    }
  ],
  "reference": "CERTA-2008-AVI-235",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-05-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Deux vuln\u00e9rabilit\u00e9s affectant Sun Java System Web Server et Sun Java\nSystem Application Server permettent \u00e0 une personne malintentionn\u00e9e de\nporter atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es ou d\u0027effectuer une\ninjection de code indirecte.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Sun Java System Web Server et Application Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Sun #231467 du 06 mai 2008",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Sun #201255 du 08 mai 2008",
      "url": null
    }
  ]
}