{"id":"CVE-2009-1079","aliases":["EUVD-2009-1080","GHSA-p7q7-4x88-9485"],"status":"published","title":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0...","description":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19659, 19660, and 19683.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0197,"percentile":0.80542,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2009-03-25T15:00:00Z","modified":"2026-06-16T23:06:27Z","products":[{"vendor":"sun","product":"java_system_identity_manager"}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021881","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/34191","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch"]},{"url":"http://blogs.sun.com/security/entry/sun_alert_253267_sun_java","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0797","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/34380","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1079"},{"url":"https://github.com/advisories/GHSA-p7q7-4x88-9485"}],"sources":{"cve":[{"id":"CVE-2009-1079","description":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19659, 19660, and 19683.","status":"published","published":"2009-03-25T15:00:00Z","modified":"2024-09-16T19:45:56.915Z","updated_at":"2026-11-02T14:33:25.516454Z"}],"euvd":[{"id":"EUVD-2009-1080","description":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19659, 19660, and 19683.","status":"published","published":"2009-03-25T15:00:00Z","modified":"2024-09-16T19:45:56Z","updated_at":"2026-11-03T00:55:20.5822Z"}],"ghsa":[{"id":"GHSA-p7q7-4x88-9485","title":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0...","description":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19659, 19660, and 19683.","status":"published","published":"2022-05-02T03:21:30Z","modified":"2023-01-31T05:07:21Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:49:11.691089Z"}],"nvd":[{"id":"CVE-2009-1079","description":"Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19659, 19660, and 19683.","status":"published","published":"2009-03-25T15:30:00.437Z","modified":"2026-06-16T23:06:27.58Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:01:34.44527Z"}]}}