NVD

Id
48998  
Name
CVE-2009-1729  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the abperson_displayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Address Book component or (2) the temporaryCalendars parameter to uwc/base/UWCMain.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-05-21  
Modified Date
2009-06-09  
Seq
2009-1729  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247823 48998 CVE-2009-1729 20090520 CORE-2009-0109 - Multiple XSS in Sun Communications Express  View
247824 48998 CVE-2009-1729 1022266  View
247825 48998 CVE-2009-1729 http://sunsolve.sun.com/search/document.do?assetkey=1-21-122793-26-1  View
247826 48998 CVE-2009-1729 258068  View
247827 48998 CVE-2009-1729 http://www.coresecurity.com/content/sun-communications-express  View
247828 48998 CVE-2009-1729 20090520 CORE-2009-0109 - Multiple XSS in Sun Communications Express  View
247829 48998 CVE-2009-1729 34154  View
247830 48998 CVE-2009-1729 34155  View
247831 48998 CVE-2009-1729 ADV-2009-1389  View
247832 48998 CVE-2009-1729 communications-express-search-xss(50658)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45012 JVNDB-2009-006019 Sun Java System Communications Express におけるクロスサイトスクリプティングの脆弱性 Sun Java System Communications Express には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1729 39160 CVE-2009-1729 48998 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006019.html 2009-05-20 2012-12-20 View