CVE-2008-5114

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Link	Resource
http://www.securityfocus.com/bid/32262
http://secunia.com/advisories/32606	Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1	Patch Vendor Advisory
http://www.securitytracker.com/id?1021170
http://www.vupen.com/english/advisories/2008/3128
http://osvdb.org/49765
https://exchange.xforce.ibmcloud.com/vulnerabilities/46552

Configuration 1

cpe:2.3:a:sun:java_system_identity_manager:6.0:sp2:*:*:*:*:*:* cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:* cpe:2.3:a:sun:java_system_identity_manager:6.0:sp1:*:*:*:*:*:* cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:* cpe:2.3:a:sun:java_system_identity_manager:6.0:sp3:*:*:*:*:*:* cpe:2.3:a:sun:java_system_identity_manager:6.0:sp4:*:*:*:*:*:* cpe:2.3:a:sun:java_system_identity_manager:6.0:*:*:*:*:*:*:*

---

Published : 2008-11-18 12:30

Updated : 2017-08-08 01:33

---

NVD link : CVE-2008-5114

Mitre link : CVE-2008-5114

No products.

CWE-79