CVE-2008-1285
Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
- Affected products
- Sun Java Server Faces
- Sun Jsf
- ≤ 1.2_07
- CVSS 2.0
- 4.3 MEDIUM
- EPSS
- 2.5% (84th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2008-03-11
CVE-2008-1285 at NVD
1 known exploit for CVE-2008-1285
Proof-of-concept code and exploit modules indexed by Sploitus