Vulnerability Details CVE-2009-2705
CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.5%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2009-2705
-
cpe:2.3:a:broadcom:siteminder:12.0
-
cpe:2.3:a:broadcom:siteminder:12.5
-
cpe:2.3:a:broadcom:siteminder:12.51
-
cpe:2.3:a:sun:j2ee:*