CVE-2008-1204

Currently unrated

Key Information:

Vendor
Oracle
Status
Java System Access Manager
Vendor
CVE Published:
8 March 2008

Summary

Multiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) Help and (2) Version windows.

References

http://www.securityfocus.com/bid/28113
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/41024
vdb-entryx_refsource_XF
http://secunia.com/advisories/29252
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.