CVE-2008-5114

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://osvdb.org/49765
• http://secunia.com/advisories/32606Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1Patch, Vendor Advisory
• http://www.securityfocus.com/bid/32262
• http://www.securitytracker.com/id?1021170
• http://www.vupen.com/english/advisories/2008/3128
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46552
• http://osvdb.org/49765
• http://secunia.com/advisories/32606Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1Patch, Vendor Advisory
• http://www.securityfocus.com/bid/32262
• http://www.securitytracker.com/id?1021170
• http://www.vupen.com/english/advisories/2008/3128
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46552

Published

Nov 18, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5108Unspecified vulnerability in Adobe AIR 1.1 and earlier allow…
• CVE-2008-5109The default configuration of Adobe Flash Media Server (FMS) …
• CVE-2008-5110syslog-ng does not call chdir when it calls chroot, which mi…
• CVE-2008-5111Unspecified vulnerability in the socket function in Sun Sola…
• CVE-2008-5112The LDAP server in Active Directory in Microsoft Windows 200…
• CVE-2008-5113WordPress 2.6.3 relies on the REQUEST superglobal array in c…
• CVE-2008-5115Cross-site request forgery (CSRF) vulnerability in Sun Java …
• CVE-2008-5116Directory traversal vulnerability in idm/includes/helpServer…
• CVE-2008-5117Open redirect vulnerability in Sun Java System Identity Mana…
• CVE-2008-5118Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, a…
• CVE-2008-5119Cross-site scripting (XSS) vulnerability in search.php in Sc…
• CVE-2008-5120Stack-based buffer overflow in the Process Software MultiNet…