SHARE
Vulnerability detected in Sun Microsystem´s communications and collaboration application
SC Staff
Excerpt:
Detected by Core Security Technologies, the vulnerability exists in a remote access element of Sun's Java Communications Suite, which if leveraged, could allow attackers to target users of the application through exploitation of cross-site scripting (XSS) bugs.
Ivan Arce, CTO of Core Security Technologies, said: “XSS bugs are popular among attackers attempting to coax web applications into providing control of end users' web browsers to carry out a wide range of malicious schemes. It is very important that organisations take the necessary steps to ensure that the applications they build or licence from third parties are not susceptible to these types of exploits.”
Source: SC Magazine
