Sun

Java System Identity Manager

19 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2009-1075

Exploit
  • EPSS 0.58%
  • Published 25.03.2009 15:30:00
  • Last modified 09.04.2025 00:30:58

Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

6.4

CVE-2009-1084

  • EPSS 0.67%
  • Published 25.03.2009 15:30:00
  • Last modified 09.04.2025 00:30:58

Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying thi...

9

CVE-2009-1083

  • EPSS 1.72%
  • Published 25.03.2009 15:30:00
  • Last modified 09.04.2025 00:30:58

Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accounts, which allows remote attackers to execute arbitrary commands via vectors involving "resource adapt...

9

CVE-2009-1082

  • EPSS 1.7%
  • Published 25.03.2009 15:30:00
  • Last modified 09.04.2025 00:30:58

Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities,...

4.3

CVE-2009-1081

Exploit
  • EPSS 0.39%
  • Published 25.03.2009 15:30:00
  • Last modified 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19595 and 19661.

4.3

CVE-2009-1080

Exploit
  • EPSS 0.39%
  • Published 25.03.2009 15:30:00
  • Last modified 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID 19033.

4.3

CVE-2009-1079

Exploit
  • EPSS 0.39%
  • Published 25.03.2009 15:30:00
  • Last modified 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19659, 19660, and 19683.

4

CVE-2009-1078

Exploit
  • EPSS 0.37%
  • Published 25.03.2009 15:30:00
  • Last modified 09.04.2025 00:30:58

Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the expected privilege requirements for (1) deleting audit policies and (2) modifying workflows, which allows remote authenticated users to have an unspecified impact.

6.5

CVE-2009-1077

Exploit
  • EPSS 1.93%
  • Published 25.03.2009 15:30:00
  • Last modified 09.04.2025 00:30:58

The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other u...

5

CVE-2009-1076

  • EPSS 0.69%
  • Published 25.03.2009 15:30:00
  • Last modified 09.04.2025 00:30:58

Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.