NVD

Id
224  
Name
CVE-2008-0239  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the (1) cntry or lang parameters to /idm/login.jsp, (2) resultsForm parameter to /idm/account/findForSelect.jsp, or (3) activeControl parameter to /idm/user/main.jsp.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-01-11  
Modified Date
2011-03-07  
Seq
2008-0239  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
1635 224 CVE-2008-0239 3535  View
1636 224 CVE-2008-0239 103180  View
1637 224 CVE-2008-0239 200558  View
1638 224 CVE-2008-0239 http://www.procheckup.com/Vulnerability_PR07-06.php  View
1639 224 CVE-2008-0239 http://www.procheckup.com/Vulnerability_PR07-07.php  View
1640 224 CVE-2008-0239 http://www.procheckup.com/Vulnerability_PR07-08.php  View
1641 224 CVE-2008-0239 http://www.procheckup.com/Vulnerability_PR07-09.php  View
1642 224 CVE-2008-0239 20080110 PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager  View
1643 224 CVE-2008-0239 27214  View
1644 224 CVE-2008-0239 1019175  View
1645 224 CVE-2008-0239 ADV-2008-0089  View
1646 224 CVE-2008-0239 sun-identity-login-xss(39580)  View
1647 224 CVE-2008-0239 sun-identity-lang-xss(39581)  View
1648 224 CVE-2008-0239 sun-identity-resultsform-xss(39582)  View
1649 224 CVE-2008-0239 sun-identity-main-xss(39583)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50053 JVNDB-2008-005363 Sun Java System Identity Manager におけるクロスサイトスクリプティングの脆弱性 Sun Java System Identity Manager には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-0239 30352 CVE-2008-0239 224 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005363.html 2008-01-09 2012-12-20 View