CVE-2009-2268

Published: Jul 1, 2009Modified: Apr 23, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Cross-Domain Controller (CDC) servlet in Sun Java System Access Manager 6 2005Q1, 7 2005Q4, and 7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (26)

Products: Sun: Java System Access Manager

Sun

1 product

Java System Access Manager

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Sun Java System Access Manager	Version 6.0_2005q1
Sun Java System Access Manager	Version 6.0_2005q1
Sun Java System Access Manager	Version 6.0_2005q1
Sun Java System Access Manager	Version 6.0_2005q1
Sun Java System Access Manager	Version 6.0_2005q1
Sun Java System Access Manager	Version 6.0_2005q1
Sun Java System Access Manager	Version 6.0_2005q1
Sun Java System Access Manager	Version 6
Sun Java System Access Manager	Version 7.0
Sun Java System Access Manager	Version 7.0_2005q4
Sun Java System Access Manager	Version 7.0_2005q4
Sun Java System Access Manager	Version 7.0_2005q4
Sun Java System Access Manager	Version 7.0_2005q4
Sun Java System Access Manager	Version 7.0_2005q4
Sun Java System Access Manager	Version 7.1
Sun Java System Access Manager	Version 7.1
Sun Java System Access Manager	Version 7.1
Sun Java System Access Manager	Version 7.1
Sun Java System Access Manager	Version 7.1
Sun Java System Access Manager	Version 7.1
Sun Java System Access Manager	Version 7.1
Sun Java System Access Manager	Version 7.1
Sun Java System Access Manager	Version 7.1
Sun Java System Access Manager	Version 7_2005q4
Sun Java System Access Manager	Version 7_2005q4
Sun Java System Access Manager	Version 7_2005q4