CVE-2008-0240: sun java_system_identity_manager Cross-site Scripting

EPSS trend

Probability

5.84%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 5.84% on 18-09-2026

18-09-202618-10-2026

EPSS score

5.84%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (procheckup.com)
Maturity: unknown
exploit-databasejspVerified
Sun Java System Identity Manager 6.0/7.0/7.1 - '/idm/help/index.jsp?helpUrl' Remote Frame Injection
Maturity: poc

References

9 links

www.securityfocus.com/archive/1/486076/100/0/threadedMailing ListX Refsource BUGTRAQ
sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1Vendor AdvisoryX Refsource SUNALERT
www.vupen.com/english/advisories/2008/0089VDB EntryX Refsource VUPEN
secunia.com/advisories/28356Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securityreason.com/securityalert/3535Third Party AdvisoryX Refsource SREASON
exchange.xforce.ibmcloud.com/vulnerabilities/39586VDB EntryX Refsource XF
sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1Vendor AdvisoryX Refsource SUNALERT
www.procheckup.com/Vulnerability_PR07-10.phpX Refsource MISCExploitPatch
www.securityfocus.com/bid/27214VDB EntryX Refsource BID

Related vulnerabilities

CVE-2008-0241sunjava_system_identity_manager2.68%18y ago11-01-2008 22:00Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the nextPage parameter.CVE-2008-0239sunjava_system_identity_manager5.70%18y ago11-01-2008 22:00Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the (1) cntry or lang parameters to /idm/login.jsp, (2) resultsForm parameter to /idm/account/findForSelect.jsp, or (3) activeControl parameter to /idm/user/main.jsp.CVE-2008-5118sunjava_system_identity_manager1.98%17y ago18-11-2008 00:00Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "frame injection."CVE-2008-5117sunjava_system_identity_manager2.62%17y ago18-11-2008 00:00Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.CVE-2008-5114sunjava_system_identity_manager1.94%17y ago18-11-2008 00:00Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2008-5115sunjava_system_identity_manager3.14%17y ago18-11-2008 00:00Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp.

All vulnerabilities injava_system_identity_manager

CVE-2008-0240: sun java_system_identity_manager Cross-site Scripting

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References