Cross-Site Scripting Vulnerabilities in Sun Java System Identity Manager
CVE-2009-1080

Currently unrated

Key Information:

Vendor
Oracle
Status
Java System Identity Manager
Vendor
CVE Published:
25 March 2009

Summary

The Sun Java System Identity Manager versions 7.0 through 8.0 are vulnerable to multiple cross-site scripting (XSS) vulnerabilities, which allow remote attackers to inject arbitrary web scripts or HTML through unspecified vectors. This flaw can potentially lead to the exposure of sensitive information or manipulation of end-user sessions.

References

http://sunsolve.sun.com/search/document.do?assetkey=1-66-...
vendor-advisoryx_refsource_SUNALERT
http://securitytracker.com/id?1021881
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/34191
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.