Java System Identity Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:sun:java_system_identity_manager:6.0:sp4:*:*:*:*:*:*
part: a version: 6.0 update: sp4
| Vendor | Sun (f793a52f-9733-5503-ba70-29fa391cdd2b) |
|---|---|
| Product | Java System Identity Manager (1e524f28-53ee-5ba8-8a3c-8b7c4b168c62) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-5118 |
vulnerable | 2026-06-08 04:50:49.664836 |
Details available
Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "frame injection."
Published: 2008-11-18T00:00:00.000Z
Updated: 2024-08-07T10:40:17.180Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5117 |
vulnerable | 2026-06-08 04:50:49.664379 |
Details available
Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Published: 2008-11-18T00:00:00.000Z
Updated: 2024-08-07T10:40:17.157Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5116 |
vulnerable | 2026-06-08 04:50:49.663912 |
Details available
Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences in the ext parameter.
Published: 2008-11-18T00:00:00.000Z
Updated: 2024-08-07T10:40:17.144Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5115 |
vulnerable | 2026-06-08 04:50:49.663399 |
Details available
Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp.
Published: 2008-11-18T00:00:00.000Z
Updated: 2024-08-07T10:40:17.158Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5114 |
vulnerable | 2026-06-08 04:50:49.661817 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2008-11-18T00:00:00.000Z
Updated: 2024-08-07T10:40:17.254Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.