AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2008-0239

MEDIUM · CVSS 4.3 EPSS 5.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-01-11 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.3. It affects Java. It may be remotely exploitable.

CVE
CVE-2008-0239
Severity
MEDIUM
CVSS
4.3
EPSS
5.70%
Java

Original NVD Description

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the (1) cntry or lang parameters to /idm/login.jsp, (2) resultsForm parameter to /idm/account/findForSelect.jsp, or (3) activeControl parameter to /idm/user/main.jsp.