Cross-Site Scripting Vulnerabilities in Sun Java System Identity Manager by Sun Microsystems
CVE-2009-1081

Currently unrated

Key Information:

Vendor

Oracle
Status
Java System Identity Manager
Vendor
CVE Published:
25 March 2009

What is CVE-2009-1081?

Multiple cross-site scripting vulnerabilities exist in Sun Java System Identity Manager versions 7.0 through 8.0. These vulnerabilities allow remote attackers to inject arbitrary web scripts or HTML into web pages through unspecified vectors. Exploiting these vulnerabilities could potentially enable attackers to execute malicious scripts in the context of the affected application, compromising user data and security.

References

http://sunsolve.sun.com/search/document.do?assetkey=1-66-...
vendor-advisoryx_refsource_SUNALERT
http://securitytracker.com/id?1021881
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/34191
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.