Sun Java System Identity Server vulnerabilities

2 CVEs affecting Sun Java System Identity Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0311, published 2010-01-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-2945, published 2008-06-30. High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days. Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows…
CVE-2010-0311, published 2010-01-14. Medium severity, CVSS 6.8. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Sun Java System Identity Manager (aka IdM) 8.1.0.5 and 8.1.0.6, when Sun Java System Access Manager, OpenSSO Enterprise 8.0, or IBM Tivoli Access Manager is used, allows…