CVE-2008-2945

no score yetEPSS 2.8%

Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715, CVE-2007-3716, and CVE-2007-4289.

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2008-06-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sun:java_system_access_manager
sun:java_system_identity_server

References

http://secunia.com/advisories/30893
http://sunsolve.sun.com/search/document.do?assetkey=1-26-201538-1
http://support.avaya.com/elmodocs2/security/ASA-2008-294.htm
http://www.securityfocus.com/bid/29988
http://www.securitytracker.com/id?1020380

Check your stack JSON