Java System Identity Manager (Sun) - vulnerabilities (CVEs)

19 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2009-03-25. Vendor: Sun.

CVEs of Java System Identity Manager

CVE-2009-1077 - CVSS 6.5 (medium), 2009-03-25: The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresChallenge…
CVE-2009-1080 - CVSS 4.3 (medium), 2009-03-25: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web…
CVE-2009-1083 - CVSS 9 (critical), 2009-03-25: Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accounts, which…
CVE-2009-1076 - CVSS 5 (medium), 2009-03-25: Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether…
CVE-2009-1079 - CVSS 4.3 (medium), 2009-03-25: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web…
CVE-2009-1082 - CVSS 9 (critical), 2009-03-25: Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin…
CVE-2009-1075 - CVSS 5 (medium), 2009-03-25: Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account…
CVE-2009-1078 - CVSS 4 (medium), 2009-03-25: Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the expected privilege requirements for (1) deleting audit policies and (2) modifying…
CVE-2009-1081 - CVSS 4.3 (medium), 2009-03-25: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web…
CVE-2009-1084 - CVSS 6.4 (medium), 2009-03-25: Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated…
CVE-2009-1074 - CVSS 5 (medium), 2009-03-25: Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain…
CVE-2008-5115 - CVSS 6.8 (medium), 2008-11-18: Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the…
CVE-2008-5118 - CVSS 4.3 (medium), 2008-11-18: Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing…
CVE-2008-5114 - CVSS 4.3 (medium), 2008-11-18: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allow remote attackers to inject…
CVE-2008-5117 - CVSS 6.4 (medium), 2008-11-18: Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web…
CVE-2008-5116 - CVSS 7.8 (high), 2008-11-18: Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers…
CVE-2008-0240 - CVSS 4.3 (medium), 2008-01-11: /idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites…
CVE-2008-0239 - CVSS 4.3 (medium), 2008-01-11: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject…
CVE-2008-0241 - CVSS 5.8 (medium), 2008-01-11: Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to redirect…