CVE-2008-5118: sun java_system_identity_manager

EPSS trend

Probability

1.98%

Chance of exploitation in the next 30 days

Percentile

80%

Versus all other CVEs

30-day change

-0.01 pp

From 1.98% on 18-09-2026

18-09-202618-10-2026

EPSS score

1.98%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

7 links

sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/32606Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/32262VDB EntryX Refsource BID
www.vupen.com/english/advisories/2008/3128VDB EntryX Refsource VUPEN
exchange.xforce.ibmcloud.com/vulnerabilities/46555VDB EntryX Refsource XF
osvdb.org/49769VDB EntryX Refsource OSVDB
www.securitytracker.com/id?1021170VDB EntryX Refsource SECTRACK

Related vulnerabilities

CVE-2008-0241sunjava_system_identity_manager2.68%18y ago11-01-2008 22:00Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the nextPage parameter.CVE-2008-0239sunjava_system_identity_manager5.70%18y ago11-01-2008 22:00Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the (1) cntry or lang parameters to /idm/login.jsp, (2) resultsForm parameter to /idm/account/findForSelect.jsp, or (3) activeControl parameter to /idm/user/main.jsp.CVE-2008-0240sunjava_system_identity_manager5.84%18y ago11-01-2008 22:00/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."CVE-2008-5117sunjava_system_identity_manager2.62%17y ago18-11-2008 00:00Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.CVE-2008-5114sunjava_system_identity_manager1.94%17y ago18-11-2008 00:00Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2008-5115sunjava_system_identity_manager3.14%17y ago18-11-2008 00:00Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp.

All vulnerabilities injava_system_identity_manager

CVE-2008-5118: sun java_system_identity_manager

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References