Java System Access Manager (Sun) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 69 known versions, newest CVE from 2011-01-19. Vendor: Sun.
CVEs of Java System Access Manager
- CVE-2010-4444 - CVSS 6.8 (medium), 2011-01-19: Unspecified vulnerability in Oracle Sun Java System Access Manager and Oracle OpenSSO 7, 7.1, and 8 allows remote attackers to affect confidentiality,…
- CVE-2009-2712 - CVSS 2.1 (low), 2009-08-07: Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local…
- CVE-2009-2713 - CVSS 4.3 (medium), 2009-08-07: The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that…
- CVE-2009-2268 - CVSS 2.6 (low), 2009-07-01: Cross-site scripting (XSS) vulnerability in the Cross-Domain Controller (CDC) servlet in Sun Java System Access Manager 6 2005Q1, 7 2005Q4, and 7.1 allows…
- CVE-2009-0348 - CVSS 5 (medium), 2009-01-29: The login module in Sun Java System Access Manager 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7.1 responds differently to a failed login attempt depending on…
- CVE-2009-0170 - CVSS 6 (medium), 2009-01-16: Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain…
- CVE-2009-0169 - CVSS 9 (critical), 2009-01-16: Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in…
- CVE-2008-2945 - CVSS 7.5 (high), 2008-06-30: Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in…
- CVE-2008-2705 - CVSS 9.3 (critical), 2008-06-16: Unspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain versions and configurations of Sun Directory Server Enterprise…
- CVE-2008-1204 - CVSS 4.3 (medium), 2008-03-08: Multiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to…
- CVE-2007-5152 - CVSS 7.5 (high), 2007-10-01: Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication after a container…
- CVE-2007-5153 - CVSS 6.8 (medium), 2007-10-01: Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allows remote attackers…
- CVE-2007-3700 - CVSS 1.7 (low), 2007-07-11: Sun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the message debug level is configured in the…
- CVE-2007-0628 - CVSS 4.3 (medium), 2007-01-31: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 (6.3), and 7 2005Q4 (7.0) before 20070129 allow…
- CVE-2006-0531 - CVSS 7.2 (high), 2006-02-04: Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level…
