CVE-2009-2705
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD
Description
CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters.
Affected (2)
Products: Sun: J2ee · Broadcom: Siteminder
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions | |
| All versions |
Related CWEs
References (2)
Timeline
No history available yet.