Description
Multiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) Help and (2) Version windows.
References
- 28113 vdb-entry
- sun-jsam-adminconsole-xss(41024) vdb-entry
- 29252 third-party-advisory
- 201251 vendor-advisory
- ADV-2008-0784 vdb-entry