CVE-2008-5114

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-11-18 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Sun Java System Identity Manager: 6.0, 6.0-sp1, 6.0-sp2, 6.0-sp3, 6.0-sp4, 7.0 (+1)

References

http://osvdb.org/49765
http://secunia.com/advisories/32606
http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1
http://www.securityfocus.com/bid/32262
http://www.securitytracker.com/id?1021170
http://www.vupen.com/english/advisories/2008/3128
https://exchange.xforce.ibmcloud.com/vulnerabilities/46552
http://osvdb.org/49765
http://secunia.com/advisories/32606
http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1
http://www.securityfocus.com/bid/32262
http://www.securitytracker.com/id?1021170

Get alerted when CVE-2008-5114 or the next vulnerability affects your stack