CVE-2007-3503: The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cros...

Security readout for executives and security teams

CVE-2007-3503 affects HTML documentation generated by the Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11. If vulnerable documentation is published, an attacker may be able to inject script or HTML into pages viewed by users. The source bundle does not provide CVSS scoring or active exploitation evidence. Most exposure is likely on public or internal developer documentation sites generated with Sun JDK 6 or JDK 5.0 Update 11. Legacy vendor packages may also matter where Red Hat, Apple, BEA, or Gentoo advisories apply. Prioritize if the organization hosts legacy Java API documentation, especially public developer portals. This is not a runtime server takeover based on the bundle, but it can undermine trusted documentation pages and users’ browsers. Mitigation focus: Check Sun, Red Hat, Apple, BEA, Gentoo, or platform-specific vendor guidance.; Update affected JDK or distribution packages according to vendor advisories.; Regenerate published Javadocs after applying the vendor-approved Javadoc fix..

Prepared

Jun 29, 2026, 04:47 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.