CVE-2009-1081: XSS
First published: Wed Mar 25 2009(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19595 and 19661.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun Java System Identity Manager | =7.1.1 | |
| Sun Java System Identity Manager | =7.0 | |
| Sun Java System Identity Manager | =7.1 | |
| Sun Java System Identity Manager | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2009-1081?
CVE-2009-1081 is classified as a critical severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2009-1081?
To fix CVE-2009-1081, it is recommended to update to the latest version of Sun Java System Identity Manager, which addresses the XSS vulnerabilities.
What software versions are affected by CVE-2009-1081?
CVE-2009-1081 affects Sun Java System Identity Manager versions 7.0 through 8.0 inclusive.
What type of vulnerability is CVE-2009-1081?
CVE-2009-1081 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
Can CVE-2009-1081 be exploited remotely?
Yes, CVE-2009-1081 can be exploited by remote attackers, making it particularly dangerous.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/remedy
- agent/severity
- agent/author
- agent/weakness
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- vendor/sun
- canonical/sun java system identity manager
- version/sun java system identity manager/7.1.1
- version/sun java system identity manager/7.0
- version/sun java system identity manager/7.1
- version/sun java system identity manager/8.0