CVE-2008-1204: Sun Java System Access Manager

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) Help and (2) Version windows.

Affected products

• Sun Java System Access Manager: version 7.0 only; version 7.0_2005q4 only; version 7.1 only

Published 2008-03-08. Last modified 2026-06-16.