CVE-2009-2268

Name: CVE-2009-2268
Creator: NVD / NIST
Published: 2009-07-01T13:00:01.42+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.65%

Last modified Jun 16, 2026

CVE-2009-2268 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in the Cross-Domain Controller (CDC) servlet in Sun Java System Access Manager 6 2005Q1, 7 2005Q4, and 7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.. EPSS estimates a 1.65% chance of exploitation in the next 30 days.

Description

Cross-site scripting (XSS) vulnerability in the Cross-Domain Controller (CDC) servlet in Sun Java System Access Manager 6 2005Q1, 7 2005Q4, and 7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Metrics

EPSS Probability

1.65%

73.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Sun	Java System Access Manager	6
Sun	Java System Access Manager	6.0_2005q1
Sun	Java System Access Manager	7.0
Sun	Java System Access Manager	7.0_2005q4
Sun	Java System Access Manager	7.1
Sun	Java System Access Manager	7_2005q4

References

http://secunia.com/advisories/35651Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-256568-1Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020343.1-1
http://secunia.com/advisories/35651Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-256568-1Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020343.1-1

Timeline

Published: Jul 1, 2009
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2009-2268?

How severe is CVE-2009-2268?

Severity scoring for CVE-2009-2268 is pending analysis. The EPSS model estimates a 1.65% probability of exploitation in the next 30 days.

How do I fix CVE-2009-2268?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2009-2268?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST