CVE-2008-1204

Sun Java System Access Manager 7.1, 7 2005Q4 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) Help and (2) Version windows.

References (5)

[Vendor Advisory] http://secunia.com/advisories/29252

[Patch] http://sunsolve.sun.com/search/document.do?assetkey=1-26-201251-1

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/41024

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/28113

[Third Party Advisory] http://www.vupen.com/english/advisories/2008/0784

Scores

EPSS 0.0029

EPSS Percentile 52.3%

Classification

CWE

CWE-79

Status draft

Affected Products (10)

sun/java_system_access_manager

Timeline

Published Mar 08, 2008

Tracked Since Feb 18, 2026