Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-1074

EPSS 0.65% · P71
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-1074

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to "ssl termination devices" and lack of support for relative URLs.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Sun Java System Identity Manager 非加密传输信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Sun Java System Identity Manager是一个完整的端到端的保护敏感数据和管理标识配置文件与许可的解决方案。 Sun Java System Identity Manager 存在非加密传输信息泄露漏洞，远程攻击者可以通过网络嗅探获得敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-1074

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-1074

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-03-25 · 58 CVEs total

CVE-2009-1076Sun Java System Identity Manager 用户登录功能信息泄露漏洞
CVE-2009-0891IBM WebSphere Application Server Username Token Option 会话劫持漏洞
CVE-2009-0928Adobe Acrobat和Reader JBIG2图形处理堆溢出漏洞
CVE-2009-0921HP OpenView网络节点管理器Accept-Language HTTP头堆溢出漏洞
CVE-2009-0920HP OpenView网络节点管理器OvAcceptLang参数堆溢出漏洞
CVE-2009-1061Adobe Acrobat Reader JBIG2未明向量代码执行漏洞
CVE-2009-1080Sun Java System Identity Manager多个跨站脚本漏洞
CVE-2009-1079Sun Java System Identity Manager多个跨站脚本漏洞
CVE-2009-1078Sun Java System Identity Manager 权限分配多个未明安全漏洞
CVE-2009-1077Sun Java System Identity Manager 更改口令工具访问控制漏洞
CVE-2009-1081Sun Java System Identity Manager多个跨站脚本漏洞
CVE-2009-1075Sun Java System Identity Manager 忘记口令功能信息泄露漏洞
CVE-2009-0215IBM Access Support ActiveX控件GetXMLValue()方式栈溢出漏洞
CVE-2009-1092GeoVision LiveAudio ActiveX控件GetAudioPlayingTime()方式代码执行漏洞
CVE-2009-1091Rapid Leech upload.php跨站脚本攻击漏洞
CVE-2009-1090Rapid Leech upload.php目录遍历和文件包含漏洞
CVE-2009-1089Rapid Leech upload.php绝对路径遍历漏洞
CVE-2009-1088Hannonhill Cascade Server XLST处理远程命令执行漏洞
CVE-2009-1087PPLive URI处理器LoadModule参数多个代码执行漏洞
CVE-2009-1086Nlnetlabs ldns 'rr.c'远程缓冲区溢出漏洞

Showing top 20 of 58 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-1074

No comments yet

Leave a comment