Return to CVE list

CVE-2008-1285

4.3
Medium

CVE-2008-1285

cve@mitre.org
Modified

Description

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Exploits

No known exploits found for this CVE.

Search Exploit-DB

References

af854a3a-2127-422b-91ae-364da2661108
http://rhn.redhat.com/errata/RHSA-2008-0825.html
af854a3a-2127-422b-91ae-364da2661108
http://rhn.redhat.com/errata/RHSA-2008-0826.html
af854a3a-2127-422b-91ae-364da2661108
http://rhn.redhat.com/errata/RHSA-2008-0827.html
af854a3a-2127-422b-91ae-364da2661108
http://rhn.redhat.com/errata/RHSA-2008-0828.html
af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/29327
af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/28192
af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1020628
af854a3a-2127-422b-91ae-364da2661108
https://jira.jboss.org/jira/browse/JBPAPP-682