PT-2008-2877 · Sun · Sun Java Server Faces

Published 2008-03-11 · Updated 2022-05-01 · CVE-2008-1285

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sun Java Server Faces (JSF) versions 1.2 through 1.2 07

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML.

Recommendations For Sun Java Server Faces (JSF) versions 1.2 through 1.2 07, update to version 1.2 08 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-1285

GHSA-VV6J-5X58-Q2C3

RHSA-2008:0825

RHSA-2008:0826

RHSA-2008:0827

RHSA-2008:0828

Affected Products

Sun Java Server Faces

References · 17

• https://nvd.nist.gov/vuln/detail/CVE-2008-1285 · Security Note
• http://rhn.redhat.com/errata/RHSA-2008-0827.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2008-0826.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2008-0828.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2008-0825.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vv6j-5x58-q2c3 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1285 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41081 · Note
• http://secunia.com/advisories/29327 · Note
• https://jira.jboss.org/jira/browse/JBPAPP-682 · Note
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=437082 · Note
• http://vupen.com/english/advisories/2008/0808/references · Note
• http://securitytracker.com/id?1020628 · Note
• http://redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp03/html-single/readme/index.html · Note
• http://redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp01/html-single/readme · Note