CVE-2009-2705

no score yetEPSS 4.4%

No CVSS score yet. EPSS 4.4% chance of exploitation in the next 30 days.

CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters.

EPSS: 4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2009-08-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

broadcom:siteminder
sun:j2ee

References

http://i8jesus.com/?p=55
http://i8jesus.com/?p=55

Check your stack JSON