Is CVE-2006-6276 being actively exploited?

CVE-2006-6276 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2006-6276?

CVE-2006-6276 has a CVSS 2.0 base score of 6.8 (MEDIUM).

CVE-2006-6276

MEDIUM · CVSS 6.8EPSS 3.6%EU EUVD

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting (XSS), and poison web caches via unspecified attack vectors.

Key facts

CVSS score: 6.8 (v2.0)
Severity: MEDIUM
CVSS vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness (CWE): CWE-444
EPSS score: 3.6% (90th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2006-6259)
Published: December 4, 2006
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2006-6259 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

sun / java system application server
sun / java system application server
sun / java system web proxy server
sun / java system web proxy server
sun / java system web proxy server
sun / java system web server
sun / java system web server
sun / one application server

References

http://secunia.com/advisories/23186(Broken Link)
http://securitytracker.com/id?1017322(Broken Link, Third Party Advisory, VDB Entry)
http://securitytracker.com/id?1017323(Broken Link, Third Party Advisory, VDB Entry)
http://securitytracker.com/id?1017324(Broken Link, Third Party Advisory, VDB Entry)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102733-1(Broken Link, Patch)
http://www.securityfocus.com/bid/21371(Broken Link, Patch, Third Party Advisory, VDB Entry)
http://www.vupen.com/english/advisories/2006/4793(Broken Link)
https://exchange.xforce.ibmcloud.com/vulnerabilities/30662(Third Party Advisory, VDB Entry)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain