CVE-2009-1080: XSS
First published: Wed Mar 25 2009(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID 19033.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun Java System Identity Manager | =7.1.1 | |
| Sun Java System Identity Manager | =7.0 | |
| Sun Java System Identity Manager | =7.1 | |
| Sun Java System Identity Manager | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2009-1080?
CVE-2009-1080 is considered a high severity vulnerability due to the potential for attackers to execute arbitrary web scripts.
How do I fix CVE-2009-1080?
To fix CVE-2009-1080, it is recommended to upgrade to a version of Sun Java System Identity Manager that is not affected by this vulnerability.
What are the affected versions in CVE-2009-1080?
CVE-2009-1080 affects Sun Java System Identity Manager versions 7.0, 7.1, 7.1.1, and 8.0.
Can CVE-2009-1080 lead to data breaches?
Yes, CVE-2009-1080 can potentially lead to data breaches if exploited, as attackers can inject scripts to manipulate user data.
Who can exploit CVE-2009-1080?
Remote attackers can exploit CVE-2009-1080 without authentication, making it a significant security risk.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/references
- agent/softwarecombine
- agent/author
- agent/remedy
- agent/weakness
- agent/severity
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- vendor/sun
- canonical/sun java system identity manager
- version/sun java system identity manager/7.1.1
- version/sun java system identity manager/7.0
- version/sun java system identity manager/7.1
- version/sun java system identity manager/8.0