Security Advisory
CVE-2007-3503
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.