NVD

Id
49064  
Name
CVE-2009-1798  
Description
Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the login_username vector for Forms/login1 is already covered by CVE-2009-4406.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-12-28  
Modified Date
2010-06-29  
Seq
2009-1798  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
248105 49064 CVE-2009-1798 http://holisticinfosec.org/content/view/111/45/  View
248106 49064 CVE-2009-1798 http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887  View
248107 49064 CVE-2009-1798 VU#166739  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41506 JVNDB-2009-002513 APC Network Management Card におけるクロスサイトスクリプティングの脆弱性 APC Switched Rack PDU デバイス上の APC Network Management Card には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1798 39229 CVE-2009-1798 49064 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002513.html 2009-12-28 2010-03-12 View