Unscored severity · published Jan 11, 2008
CVE-2008-0240
/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing…
–
CVSS
5.8%
EPSS
No
On KEV
Description
/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."
Exploitation
Is it being used?
Exploit prediction (EPSS)5.8% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Java System Identity Manager · Sun
6.0; 6.0; 6.0; 7.0; 7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0240
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0240
Vendor Advisory
http://secunia.com/advisories/28356
securityreason.com
http://securityreason.com/securityalert/3535
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1
Exploit
http://www.procheckup.com/Vulnerability_PR07-10.php
www.securityfocus.com
http://www.securityfocus.com/archive/1/486076/100/0/threaded
More from Java System Identity Manager
–
CVE-2009-1084
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and…
–
CVE-2009-1083
Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accounts, which allows remote…
–
CVE-2009-1082
Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by…
–
CVE-2009-1081
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via…
–
CVE-2009-1080
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via…