Multiple Cross-Site Scripting Vulnerabilities in Sun Java System Communications Express

CVE-2009-0877

Summary

Multiple cross-site scripting vulnerabilities have been identified in Sun Java System Communications Express. These vulnerabilities enable remote attackers to inject arbitrary web scripts or HTML into affected instances, primarily through the Full Name or Subject fields. Exploitation of these flaws could lead to unauthorized actions executed in the context of an authenticated user, potentially compromising sensitive data and overall system integrity. It is essential for organizations using this product to be aware of these risks and implement necessary security measures.

References