Lucene search

[email protected]CVE-2009-3567

HistoryOct 06, 2009 - 8:30 p.m.

CVE-2009-3567

2009-10-0620:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2009-3567

cross-site scripting

xss

kayako supportsuite

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.0%

JSON

Cross-site scripting (XSS) vulnerability in modules/tickets/functions_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the staff control panel, a different vector than CVE-2007-1145.

Affected configurations

NVD

Node

kayakoesupportRange≤3.60.04

kayakoesupportMatch2.1.2

kayakoesupportMatch2.1.8

kayakoesupportMatch2.2

kayakoesupportMatch2.2.5

kayakoesupportMatch2.3

kayakoesupportMatch2.3.1

kayakoesupportMatch3.00.13

kayakoesupportMatch3.00.90

kayakoesupportMatch3.04.10

kayakosupportsuiteRange≤3.60.04

kayakosupportsuiteMatch3.00.26

kayakosupportsuiteMatch3.00.32

kayakosupportsuiteMatch3.10.00

kayakosupportsuiteMatch3.10.02

kayakosupportsuiteMatch3.11.00

kayakosupportsuiteMatch3.11.01

kayakosupportsuiteMatch3.20.02

kayakosupportsuiteMatch3.30rc2

kayakosupportsuiteMatch3.30rc3

kayakosupportsuiteMatch3.50.06

CPENameOperatorVersion
kayako:esupportkayako esupportle3.60.04
kayako:esupportkayako esupporteq2.1.2
kayako:esupportkayako esupporteq2.1.8
kayako:esupportkayako esupporteq2.2
kayako:esupportkayako esupporteq2.2.5
kayako:esupportkayako esupporteq2.3
kayako:esupportkayako esupporteq2.3.1
kayako:esupportkayako esupporteq3.00.13
kayako:esupportkayako esupporteq3.00.90
kayako:esupportkayako esupporteq3.04.10

CPE	Name	Operator	Version
kayako:esupport	kayako esupport	le	3.60.04
kayako:esupport	kayako esupport	eq	2.1.2
kayako:esupport	kayako esupport	eq	2.1.8
kayako:esupport	kayako esupport	eq	2.2
kayako:esupport	kayako esupport	eq	2.2.5
kayako:esupport	kayako esupport	eq	2.3
kayako:esupport	kayako esupport	eq	2.3.1
kayako:esupport	kayako esupport	eq	3.00.13
kayako:esupport	kayako esupport	eq	3.00.90
kayako:esupport	kayako esupport	eq	3.04.10

Rows per page:

1-10 of 191

References

blog.kayako.com/2009/09/security-bulletin-supportsuite-and-esupport/

osvdb.org/58516

secunia.com/advisories/36807

www.securityfocus.com/bid/36568

exchange.xforce.ibmcloud.com/vulnerabilities/53558

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.0%

JSON

Related for CVE-2009-3567

cvelist2 prion2 nvd2 cve1 securityvulns1