CVE-2009-2704

CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing a %00 (encoded null byte).

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2009-08-11

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• J2ee (Sun)

References

• http://i8jesus.com/?p=55