Published: 11/01/2008 Updated: 15/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 445

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Subscribe to Java System Identity Manager

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote malicious users to inject arbitrary HTML or web script via the (1) cntry or lang parameters to /idm/login.jsp, (2) resultsForm parameter to /idm/account/findForSelect.jsp, or (3) activeControl parameter to /idm/user/main.jsp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sun java system identity manager 6.0
sun java system identity manager 7.0
sun java system identity manager 7.1

source: wwwsecurityfocuscom/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting issues, because it fails to adequately sanitize user-supplied input Attackers can exploit these issues to execute arbitrary HTML and script code in ...

source: wwwsecurityfocuscom/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting issues, because it fails to adequately sanitize user-supplied input Attackers can exploit these issues to execute arbitrary HTML and script code i ...

source: wwwsecurityfocuscom/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site scripting issues, because it fails to adequately sanitize user-supplied input Attackers can exploit these issues to execute arbitrary HTML and script co ...

CWE-79 http://www.procheckup.com/Vulnerability_PR07-06.php http://www.procheckup.com/Vulnerability_PR07-07.php http://www.procheckup.com/Vulnerability_PR07-08.php http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1 http://www.securityfocus.com/bid/27214 http://secunia.com/advisories/28356 http://www.securitytracker.com/id?1019175 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1 http://securityreason.com/securityalert/3535 http://www.procheckup.com/Vulnerability_PR07-09.php http://www.vupen.com/english/advisories/2008/0089 https://exchange.xforce.ibmcloud.com/vulnerabilities/39583 https://exchange.xforce.ibmcloud.com/vulnerabilities/39582 https://exchange.xforce.ibmcloud.com/vulnerabilities/39581 https://exchange.xforce.ibmcloud.com/vulnerabilities/39580 http://www.securityfocus.com/archive/1/486076/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/31004/

CVE-2008-0239

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect