Sun Java System Web Server 6.1 SP12/SP13 Release Notes

HTTP Response-Splitting and XSS Vulnerability Resolved

As reported in issue 6957507, an HTTP response-splitting and XSS vulnerability was discovered in previous Web Server 6.1 versions. Web Server 6.1 SP13 corrects this vulnerability.