CVEvulnerability
CVE-2009-1080
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-03-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID 19033.
Affected configurations
• sun java system identity manager 7.0
• sun java system identity manager 7.1
• sun java system identity manager 7.1.1
• sun java system identity manager 8.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://blogs.sun.com/security/entry/sun_alert_253267_sun_java Patch, Vendor Advisory
- http://secunia.com/advisories/34380 Vendor Advisory
- http://securitytracker.com/id?1021881 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/34191 Exploit, Patch
- http://www.vupen.com/english/advisories/2009/0797 Vendor Advisory
- http://blogs.sun.com/security/entry/sun_alert_253267_sun_java Patch, Vendor Advisory
- http://secunia.com/advisories/34380 Vendor Advisory
- http://securitytracker.com/id?1021881 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/34191 Exploit, Patch
- http://www.vupen.com/english/advisories/2009/0797 Vendor Advisory