NVD

Id
50120  
Name
CVE-2009-2898  
Description
Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.0.x before 4.0.3.1, 4.1.x before 4.1.2.1, and 4.2-beta1; Application Management Suite (AMS) 2.0.0.SR3; and tc Server 6.0.20.B allows remote authenticated users to inject arbitrary web script or HTML via the Description field. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-10-13  
Modified Date
2009-10-13  
Seq
2009-2898  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253634 50120 CVE-2009-2898 http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=advisory&name=Hyperic_HQ_Multiple_XSS  View
253635 50120 CVE-2009-2898 http://jira.hyperic.com/browse/HHQ-3390  View
253636 50120 CVE-2009-2898 http://www.coresecurity.com/content/hyperic-hq-vulnerabilities  View
253637 50120 CVE-2009-2898 20091003 CORE-2009-0812-Hyperic HQ Multiple XSS  View
253638 50120 CVE-2009-2898 20091002 CVE-2009-2898: Hyperic HQ - Stored XSS in alerts list  View
253639 50120 CVE-2009-2898 http://www.springsource.com/security/hyperic-hq  View
253640 50120 CVE-2009-2898 hyperichq-description-xss(53660)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45234 JVNDB-2009-006241 SpringSource Hyperic HQ など製品のアラート一覧機能におけるクロスサイトスクリプティングの脆弱性 SpringSource Hyperic HQ、Application Management Suite (AMS)、および tc Server の Web インターフェースのアラート一覧機能には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-2898 40329 CVE-2009-2898 50120 3.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006241.html 2009-10-13 2012-12-20 View