NVD

Id
49652  
Name
CVE-2009-2405  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML via the (1) monitorName, (2) objectName, (3) attribute, or (4) period parameter to createSnapshot.jsp, or the (5) monitorName, (6) objectName, (7) attribute, (8) threshold, (9) period, or (10) enabled parameter to createThresholdMonitor.jsp. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-12-15  
Modified Date
2009-12-16  
Seq
2009-2405  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250847 49652 CVE-2009-2405 1023315  View
250848 49652 CVE-2009-2405 37276  View
250849 49652 CVE-2009-2405 jboss-createsnapshot-xss(54700)  View
250850 49652 CVE-2009-2405 https://bugzilla.redhat.com/show_bug.cgi?id=510023  View
250851 49652 CVE-2009-2405 https://jira.jboss.org/jira/browse/JBAS-7105  View
250852 49652 CVE-2009-2405 https://jira.jboss.org/jira/browse/JBPAPP-2274  View
250853 49652 CVE-2009-2405 https://jira.jboss.org/jira/browse/JBPAPP-2284  View
250854 49652 CVE-2009-2405 RHSA-2009:1636  View
250855 49652 CVE-2009-2405 RHSA-2009:1637  View
250856 49652 CVE-2009-2405 RHSA-2009:1649  View
250857 49652 CVE-2009-2405 RHSA-2009:1650  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45145 JVNDB-2009-006152 Red Hat JBoss Enterprise Application Platform の Web Console におけるクロスサイトスクリプティングの脆弱性 Red Hat JBoss Enterprise Application Platform の Web Console には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-2405 39836 CVE-2009-2405 49652 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006152.html 2009-12-09 2012-12-20 View