:Some vulnerabilities have been reported in Sun Java System Identity Manager, which can be exploited by malicious people to conduct cross-site scripting attacks.Input passed to unspecified parameters is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site.The vulnerability is reported in Sun Java System Identity Manager 6.0 (including SP1, SP2, SP3), 7.0, and 7.1.Solution:A final resolution is pending completion.Do not follow links from untrusted sources.Provided and/or discovered by:The vendor credits Adrian Pastor and Jan Fry of ProCheckUp Ltd.Original Advisory:http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1

Original post by amit