AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2008-2945

HIGH · CVSS 7.5 EPSS 2.80%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-06-30 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Java.

CVE
CVE-2008-2945
Severity
HIGH
CVSS
7.5
EPSS
2.80%
Java

Original NVD Description

Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715, CVE-2007-3716, and CVE-2007-4289.