NVD

Id
48665  
Name
CVE-2009-1380  
Description
Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to inject arbitrary web script or HTML via the filter parameter, related to the key property and the position of quote and colon characters.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-12-15  
Modified Date
2009-12-16  
Seq
2009-1380  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245740 48665 CVE-2009-1380 1023315  View
245741 48665 CVE-2009-1380 37276  View
245742 48665 CVE-2009-1380 jboss-enterprise-jmxconsole-xss(54698)  View
245743 48665 CVE-2009-1380 https://bugzilla.redhat.com/show_bug.cgi?id=511224  View
245744 48665 CVE-2009-1380 https://jira.jboss.org/jira/browse/JBPAPP-1983  View
245745 48665 CVE-2009-1380 RHSA-2009:1636  View
245746 48665 CVE-2009-1380 RHSA-2009:1637  View
245747 48665 CVE-2009-1380 RHSA-2009:1649  View
245748 48665 CVE-2009-1380 RHSA-2009:1650  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44946 JVNDB-2009-005953 Red Hat JBoss Enterprise Application Platform の JBossAs におけるクロスサイトスクリプティングの脆弱性 Red Hat JBoss Enterprise Application Platform の JBossAs の JMX-Console は、key プロパティ、引用符、およびコロンの文字の位置に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1380 38811 CVE-2009-1380 48665 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005953.html 2009-12-09 2012-12-20 View