VYPR
Unrated severityNVD Advisory· Published Nov 18, 2008· Updated Apr 23, 2026

CVE-2008-5118

CVE-2008-5118

Description

Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "frame injection."

Affected products

7
  • cpe:2.3:a:sun:java_system_identity_manager:6.0:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:sun:java_system_identity_manager:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:sun:java_system_identity_manager:6.0:sp1:*:*:*:*:*:*
    • cpe:2.3:a:sun:java_system_identity_manager:6.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:sun:java_system_identity_manager:6.0:sp3:*:*:*:*:*:*
    • cpe:2.3:a:sun:java_system_identity_manager:6.0:sp4:*:*:*:*:*:*
    • cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.