CVE-2009-1080

EUVD-2009-1081
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID 19033.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
Affected Products (NVD)
VendorProductVersion
sunjava_system_identity_manager
7.0
sunjava_system_identity_manager
7.1
sunjava_system_identity_manager
7.1.1
sunjava_system_identity_manager
8.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://blogs.sun.com/security/entry/sun_alert_253267_sun_java
http://secunia.com/advisories/34380
http://securitytracker.com/id?1021881
http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1
http://www.securityfocus.com/bid/34191
http://www.vupen.com/english/advisories/2009/0797
http://blogs.sun.com/security/entry/sun_alert_253267_sun_java
http://secunia.com/advisories/34380
http://securitytracker.com/id?1021881
http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1
http://www.securityfocus.com/bid/34191
http://www.vupen.com/english/advisories/2009/0797