CVE-2008-5266: XSS
Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.101 build b09d-fcs and 9.102 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a different vector than CVE-2008-2751.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5266?
CVE-2008-5266 has a medium severity rating due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2008-5266?
To fix CVE-2008-5266, ensure that you upgrade to a patched version of the Sun Java System Application Server or apply the necessary security updates.
Which versions are affected by CVE-2008-5266?
CVE-2008-5266 affects Sun Java System Application Server versions 9.1_01-b09d-fcs, 9.1_02-b04-fcs, and Oracle GlassFish Server version 2.0.
What types of attacks can exploit CVE-2008-5266?
CVE-2008-5266 can be exploited to conduct arbitrary web script injection attacks via cross-site scripting (XSS).
Is CVE-2008-5266 still a relevant vulnerability today?
While CVE-2008-5266 is an older vulnerability, it remains relevant for any systems still using affected versions of Sun Java System Application Server or Oracle GlassFish Server.