Sun Java System Access Manager 6.3
Approved changes feed: RSS · Atom
cpe:2.3:a:sun:java_system_access_manager:6.3:*:*:*:*:*:*:*
part: a version: 6.3 update: *
| Vendor | Sun (f793a52f-9733-5503-ba70-29fa391cdd2b) |
|---|---|
| Product | Java System Access Manager (a067d06d-7904-5960-8670-f9a5b51cc260) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-0170 |
vulnerable | 2026-06-08 04:51:08.014818 |
Details available
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
Published: 2009-01-16T21:00:00.000Z
Updated: 2024-08-07T04:24:18.155Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2945 |
vulnerable | 2026-06-08 04:50:32.670726 |
Details available
Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715, CVE-2007-3716, and CVE-2007-4289.
Published: 2008-06-30T22:00:00.000Z
Updated: 2024-08-07T09:21:34.571Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0628 |
vulnerable | 2026-06-08 04:49:32.900508 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 (6.3), and 7 2005Q4 (7.0) before 20070129 allow remote attackers to inject arbitrary web script or HTML via the (1) goto or (2) gx-charset parameter. NOTE: some of these details are obtained from third party information.
Published: 2007-01-31T18:00:00.000Z
Updated: 2024-08-07T12:26:53.503Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.