CVE-2008-0241: Sun Java System Identity Manager

Medium severity, CVSS 5.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the nextPage parameter.

Affected products

• Sun Java System Identity Manager: version 6.0 only; version 7.0 only; version 7.1 only

Published 2008-01-11. Last modified 2026-06-16.