VulnerabilityModified
CVE-2008-5114
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MEDIUM 4.3EPSS 1.95%
Does this matter?
Lower severity and a low EPSS score (1.95%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.95% probability · 79th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- sun/java system identity manager
- Source
- cve@mitre.org
References
- http://osvdb.org/49765
- http://secunia.com/advisories/32606Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1Patch, Vendor Advisory
- http://www.securityfocus.com/bid/32262
- http://www.securitytracker.com/id?1021170
- http://www.vupen.com/english/advisories/2008/3128
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46552
- http://osvdb.org/49765
- http://secunia.com/advisories/32606Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1Patch, Vendor Advisory
- http://www.securityfocus.com/bid/32262
- http://www.securitytracker.com/id?1021170
- http://www.vupen.com/english/advisories/2008/3128
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46552
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.