Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566204.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/43978http://www.securityfocus.com/bid/26978http://secunia.com/advisories/28216http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1http://www.vupen.com/english/advisories/2007/4313