Lucene search

K
cve[email protected]CVE-2009-2283
HistoryJul 01, 2009 - 1:00 p.m.

CVE-2009-2283

2009-07-0113:00:01
CWE-79
web.nvd.nist.gov
31
cve-2009-2283
cross-site scripting
xss
sun java web console
solaris 10
security vulnerability
nvd

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.7%

Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD
Node
sunjava_web_consoleMatch3.0.2
OR
sunjava_web_consoleMatch3.0.2linux
OR
sunjava_web_consoleMatch3.0.2solaris8_sparc
OR
sunjava_web_consoleMatch3.0.2solaris8_x86
OR
sunjava_web_consoleMatch3.0.2solaris9_sparc
OR
sunjava_web_consoleMatch3.0.2windows
OR
sunjava_web_consoleMatch3.0.3
OR
sunjava_web_consoleMatch3.0.3linux
OR
sunjava_web_consoleMatch3.0.3solaris9_sparc
OR
sunjava_web_consoleMatch3.0.3solaris9_x86
OR
sunjava_web_consoleMatch3.0.3windows
OR
sunjava_web_consoleMatch3.0.4
OR
sunjava_web_consoleMatch3.0.4linux
OR
sunjava_web_consoleMatch3.0.4solaris9_sparc
OR
sunjava_web_consoleMatch3.0.4solaris9_x86
OR
sunjava_web_consoleMatch3.0.4windows
OR
sunjava_web_consoleMatch3.0.5
OR
sunjava_web_consoleMatch3.0.5linux
OR
sunjava_web_consoleMatch3.0.5solaris9_sparc
OR
sunjava_web_consoleMatch3.0.5solaris9_x86
OR
sunjava_web_consoleMatch3.0.5windows
OR
sunsolarisMatch10sparc
OR
sunsolarisMatch10x86

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.7%

Related for CVE-2009-2283