CVE-2008-1204 Multiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to inject arbitrary web script or HTML via u...
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) Help and (2) Version windows.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun java system access manager | = 7.0 | No fix listed |
| sun java system access manager | = 7.0_2005q4 | No fix listed |
| sun java system access manager | = 7.1 | No fix listed |
References
- 29252 third-party-advisory vendor-advisory
- 201251 patch vendor-advisory
- 28113 vdb-entry
- ADV-2008-0784 vdb-entry
- sun-jsam-adminconsole-xss(41024) vdb-entry