CVE-2009-1081

Опубликовано: 25 мар. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19595 and 19661.

Ссылки

http://blogs.sun.com/security/entry/sun_alert_253267_sun_java
Patch
Vendor Advisory
http://secunia.com/advisories/34380
Vendor Advisory
http://securitytracker.com/id?1021881
http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1
Patch
Vendor Advisory
http://www.securityfocus.com/bid/34191
Exploit
Patch
http://www.vupen.com/english/advisories/2009/0797
Vendor Advisory
http://blogs.sun.com/security/entry/sun_alert_253267_sun_java
Patch
Vendor Advisory
http://secunia.com/advisories/34380
Vendor Advisory
http://securitytracker.com/id?1021881
http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1
Patch
Vendor Advisory
http://www.securityfocus.com/bid/34191
Exploit
Patch
http://www.vupen.com/english/advisories/2009/0797
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_identity_manager:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_identity_manager:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00439

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-q529-c86m-mqjg

github

почти 4 года назад