CVE-2009-1553 in GlassFish Server信息

摘要

由 VulDB • 2026-05-31

Sun GlassFish Enterprise Server 2.1 的管理控制台（Admin Console）中存在多个跨站脚本（XSS）漏洞，远程攻击者可通过查询字符串向以下路径注入任意 Web 脚本或 HTML：(1) applications/applications.jsf、(2) configuration/configuration.jsf、(3) customMBeans/customMBeans.jsf、(4) resourceNode/resources.jsf、(5) sysnet/registration.jsf 或 (6) webService/webServicesGeneral.jsf；或通过 name 参数向以下路径注入：(7) configuration/auditModuleEdit.jsf、(8) configuration/httpListenerEdit.jsf 或 (9) resourceNode/jdbcResourceEdit.jsf。

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2009-05-06

披露

2009-05-06

管理

已接受

条目

VDB-48067

CPE

准备好

CWE

CWE-79 (已确认)

利用

下载

CVSS

4.3 (NVD)

EPSS

0.08199

KEV

否

活动

非常低

部门

Pharma, Telecommunication, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2009-1553
NVD	https://nvd.nist.gov/vuln/detail/CVE-2009-1553
CVE Details	https://www.cvedetails.com/cve/CVE-2009-1553/

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!