Lucene search
HistoryDec 23, 2009 - 9:30 p.m.
CVE-2009-4406
cve-2009-4406
xss
apc
switched rack pdu
ap7932 b2
remote attackers
web script
html
injection
nvd
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
74.1%
Cross-site scripting (XSS) vulnerability in Forms/login1 in American Power Conversion (APC) Switched Rack PDU AP7932 B2, running rpdu 3.3.3 or 3.7.0 on AOS 3.3.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the login_username parameter.
Affected configurations
Node
apcap7932_b2_firmwareMatch3.3.3
ORapcap7932_b2_firmwareMatch3.7.0
apcap7932_b2
ORapcaosMatch3.3.4
Related
prion
prion
Cross site scripting
2009-12-23 21:30:00
Cross site scripting
2009-12-28 19:30:00
cvelist
cvelist
CVE-2009-4406
2009-12-23 21:00:00
CVE-2009-1798
2022-10-03 16:23:59
nvd
nvd
CVE-2009-4406
2009-12-23 21:30:00
CVE-2009-1798
2009-12-28 19:30:00
cve
cve
CVE-2009-1798
2022-10-03 16:23:59
cert
cert
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
74.1%
Related for CVE-2009-4406