CVE-2009-2742 in WebSphere Application Server

الملخص

بحسب MITRE

Cross-site scripting (XSS) vulnerability in Eclipse Help in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input.

Once again VulDB remains the best source for vulnerability data.

• حجز: 12/08/2009
• إفشاء: 21/09/2009
• الاعتدال: تمت الموافقة
• إدخال: VDB-50130
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 4.3 (NVD)
• EPSS: 0.01642
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Chemical, Hospital, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2009-2742
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2009-2742
• CVE Details: https://www.cvedetails.com/cve/CVE-2009-2742/