Sploitus

12 exploited vulnerabilities in Sun Java System Identity Manager

Vulnerabilities with publicly known exploits

Vendors
Sun
With known exploits
12
Affected Sun Java System Identity Manager versions
= 6.0, 7.0, 7.1

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2008-5116 1 exploit
CVSS 7.8 HIGH 2008-11-18FIX AVAILABLE
Sun Java System Identity Manager目录遍历及跨站请求伪造漏洞
CVE-2008-5115 2 exploits
CVSS 6.8 MEDIUM 2008-11-18FIX AVAILABLE
Sun Java System Identity Manager目录遍历及跨站请求伪造漏洞Sun Java System Identity Manager 6.0/7.x - Multiple Vulnerabilities
CVE-2009-1077
CVSS 6.5 MEDIUM 2009-03-25
CVE-2008-0241
CVSS 5.8 MEDIUM 2008-01-11FIX AVAILABLE
CVE-2009-1075
CVSS 5.0 MEDIUM 2009-03-25FIX AVAILABLE
CVE-2009-1074
CVSS 5.0 MEDIUM 2009-03-25FIX AVAILABLE
CVE-2009-1081
CVSS 4.3 MEDIUM 2009-03-25
CVE-2009-1080
CVSS 4.3 MEDIUM 2009-03-25
CVE-2009-1079
CVSS 4.3 MEDIUM 2009-03-25FIX AVAILABLE
CVE-2008-0240 1 exploit
CVSS 4.3 MEDIUM 2008-01-11FIX AVAILABLE
Sun Java System Identity Manager 6.0/7.0/7.1 - '/idm/help/index.jsp?helpUrl' Remote Frame Injection
CVE-2008-0239 3 exploits
CVSS 4.3 MEDIUM 2008-01-11FIX AVAILABLE
Sun Java System Identity Manager 6.0/7.0/7.1 - '/idm/login.jsp' Multiple Cross-Site Scripting VulnerabilitiesSun Java System Identity Manager 6.0/7.0/7.1 - '/idm/account/findForSelect.jsp?resultsForm' Cross-Site Scripting
CVE-2009-1078
CVSS 4.0 MEDIUM 2009-03-25FIX AVAILABLE