Sun Java System Identity Manager 7.0
Approved changes feed: RSS · Atom
cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*
part: a version: 7.0 update: *
| Vendor | Sun (f793a52f-9733-5503-ba70-29fa391cdd2b) |
|---|---|
| Product | Java System Identity Manager (1e524f28-53ee-5ba8-8a3c-8b7c4b168c62) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-1084 |
vulnerable | 2026-06-08 04:51:12.955700 |
Details available
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.
Published: 2009-03-25T15:00:00.000Z
Updated: 2024-08-07T04:57:17.829Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1083 |
vulnerable | 2026-06-08 04:51:12.955265 |
Details available
Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accounts, which allows remote attackers to execute arbitrary commands via vectors involving "resource adapters."
Published: 2009-03-25T15:00:00.000Z
Updated: 2024-09-17T00:51:28.264Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1082 |
vulnerable | 2026-06-08 04:51:12.954848 |
Details available
Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the saveNoValidate action and saveNoValidateAllowedFormsAndWorkflows IDs.
Published: 2009-03-25T15:00:00.000Z
Updated: 2024-09-16T18:14:35.799Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1081 |
vulnerable | 2026-06-08 04:51:12.954277 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19595 and 19661.
Published: 2009-03-25T15:00:00.000Z
Updated: 2024-09-17T01:36:32.145Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1080 |
vulnerable | 2026-06-08 04:51:12.953887 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID 19033.
Published: 2009-03-25T15:00:00.000Z
Updated: 2024-09-17T04:03:46.796Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1079 |
vulnerable | 2026-06-08 04:51:12.953489 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1078 |
vulnerable | 2026-06-08 04:51:12.953080 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1077 |
vulnerable | 2026-06-08 04:51:12.952471 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1076 |
vulnerable | 2026-06-08 04:51:12.951994 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1075 |
vulnerable | 2026-06-08 04:51:12.951420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1074 |
vulnerable | 2026-06-08 04:51:12.949267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5118 |
vulnerable | 2026-06-08 04:50:49.664852 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5117 |
vulnerable | 2026-06-08 04:50:49.664395 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5116 |
vulnerable | 2026-06-08 04:50:49.663928 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5115 |
vulnerable | 2026-06-08 04:50:49.663416 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5114 |
vulnerable | 2026-06-08 04:50:49.662321 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0241 |
vulnerable | 2026-06-08 04:50:10.580060 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0240 |
vulnerable | 2026-06-08 04:50:10.579567 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0239 |
vulnerable | 2026-06-08 04:50:10.578418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.