Approved changes feed: RSS · Atom

cpe:2.3:a:sun:java_system_access_manager:7.1:*:solaris_x86:*:*:*:*:*

part: a version: 7.1 update: *

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJava System Access Manager (a067d06d-7904-5960-8670-f9a5b51cc260)
Editionsolaris_x86
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0169 vulnerable 2026-06-08 04:51:08.013068 Details available
Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm.
Published: 2009-01-16T21:00:00.000Z
Updated: 2024-08-07T04:24:17.791Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1204 vulnerable 2026-06-08 04:50:19.645066 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) Help and (2) Version windows.
Published: 2008-03-08T00:00:00.000Z
Updated: 2024-08-07T08:17:34.098Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5153 vulnerable 2026-06-08 04:49:58.019422 Details available
Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allows remote attackers to execute arbitrary code via unspecified vectors.
Published: 2007-10-01T00:00:00.000Z
Updated: 2024-08-07T15:24:40.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5152 vulnerable 2026-06-08 04:49:58.017925 Details available
Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication after a container restart, which allows remote attackers to perform administrative tasks.
Published: 2007-10-01T00:00:00.000Z
Updated: 2024-08-07T15:24:41.743Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.