NVD

Id
50246  
Name
CVE-2009-3029  
Description
Cross-site scripting (XSS) vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-10-15  
Modified Date
2013-02-06  
Seq
2009-3029  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
254345 50246 CVE-2009-3029 1022989  View
254346 50246 CVE-2009-3029 36570  View
254347 50246 CVE-2009-3029 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00  View
254348 50246 CVE-2009-3029 ADV-2009-2849  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45255 JVNDB-2009-006262 SecurityExpressions Audit および Compliance Server のコンソールにおけるクロスサイトスクリプティングの脆弱性 SecurityExpressions Audit および Compliance Server のコンソールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-3029 40460 CVE-2009-3029 50246 3.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006262.html 2009-10-06 2012-12-20 View