CVE-2008-0239: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the (1) cntry or lang parameters to /idm/login.jsp, (2) resultsForm parameter to /idm/account/findForSelect.jsp, or (3) activeControl parameter to /idm/user/main.jsp.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0239?
CVE-2008-0239 is classified as a high severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2008-0239?
To fix CVE-2008-0239, ensure that you are using an updated version of the Sun Java System Identity Manager that is not vulnerable to XSS.
What products are affected by CVE-2008-0239?
CVE-2008-0239 affects Sun Java System Identity Manager versions 6.0 SP1 through SP3, 7.0, and 7.1.
What type of vulnerability is CVE-2008-0239?
CVE-2008-0239 is a cross-site scripting (XSS) vulnerability that allows for the injection of arbitrary HTML or web scripts.
Can CVE-2008-0239 be exploited remotely?
Yes, CVE-2008-0239 can be exploited remotely by attackers to execute unwanted scripts in the context of a user’s browser.