CVE-2008-1204

Published: Mar 8, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) Help and (2) Version windows.

Affected (10)

Products: Sun: Java System Access Manager

Sun

1 product

Java System Access Manager

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Sun Java System Access Manager	Version 7.0
Sun Java System Access Manager	Version 7.0_2005q4
Sun Java System Access Manager	Version 7.0_2005q4
Sun Java System Access Manager	Version 7.0_2005q4
Sun Java System Access Manager	Version 7.0_2005q4
Sun Java System Access Manager	Version 7.1
Sun Java System Access Manager	Version 7.1
Sun Java System Access Manager	Version 7.1
Sun Java System Access Manager	Version 7.1
Sun Java System Access Manager	Version 7.1