NVD

Id
47386  
Name
CVE-2009-0038  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) description parameter to console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-04-17  
Modified Date
2009-04-28  
Seq
2009-0038  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
237056 47386 CVE-2009-0038 http://dsecrg.com/pages/vul/show.php?id=119  View
237057 47386 CVE-2009-0038 http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214  View
237058 47386 CVE-2009-0038 http://issues.apache.org/jira/browse/GERONIMO-4597  View
237059 47386 CVE-2009-0038 20090416 [DSECRG-09-019] Apache Geronimo - XSS vulnerabilities.txt  View
237060 47386 CVE-2009-0038 34562  View
237061 47386 CVE-2009-0038 ADV-2009-1089  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42159 JVNDB-2009-003166 Apache Geronimo Application Server の Web 管理コンソールにおけるクロスサイトスクリプティングの脆弱性 Apache Geronimo Application Server の Web 管理コンソールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-0038 37469 CVE-2009-0038 47386 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003166.html 2009-04-17 2012-06-26 View