Lucene search

[email protected]CVE-2009-1288

HistoryApr 13, 2009 - 4:30 p.m.

CVE-2009-1288

2009-04-1316:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2009-1288

cross-site scripting

xss

ibm bladecenter

amm

advanced management module

security vulnerability

nvd

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via (1) the username in a login action or (2) the PATH parameter to private/file_management.ssi in the File manager.

CPENameOperatorVersion
ibm:advanced_management_moduleibm advanced management moduleeq1.36h
ibm:bladecenteribm bladecentereqe
ibm:bladecenteribm bladecentereqh
ibm:bladecenteribm bladecentereqhc10
ibm:bladecenteribm bladecentereqhs12
ibm:bladecenteribm bladecentereqhs20
ibm:bladecenteribm bladecentereqhs21
ibm:bladecenteribm bladecentereqhs21_xm
ibm:bladecenteribm bladecentereqht
ibm:bladecenteribm bladecentereqjs12

CPE	Name	Operator	Version
ibm:advanced_management_module	ibm advanced management module	eq	1.36h
ibm:bladecenter	ibm bladecenter	eq	e
ibm:bladecenter	ibm bladecenter	eq	h
ibm:bladecenter	ibm bladecenter	eq	hc10
ibm:bladecenter	ibm bladecenter	eq	hs12
ibm:bladecenter	ibm bladecenter	eq	hs20
ibm:bladecenter	ibm bladecenter	eq	hs21
ibm:bladecenter	ibm bladecenter	eq	hs21_xm
ibm:bladecenter	ibm bladecenter	eq	ht
ibm:bladecenter	ibm bladecenter	eq	js12

Rows per page:

1-10 of 191

References

osvdb.org/53657

osvdb.org/53658

securitytracker.com/id?1022025

www.louhinetworks.fi/advisory/ibm_090409.txt

www.securityfocus.com/archive/1/502582/100/0/threaded

www.securityfocus.com/bid/34447

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.6%

JSON

Related for CVE-2009-1288

prion1 cvelist1