Lucene search

[email protected]CVE-2009-4995

HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-4995

2022-10-0316:24:03

CWE-79

[email protected]

web.nvd.nist.gov

cve-2009-4995

xss vulnerability

smartertools smartertrack

frmtickets.aspx

web security

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

51.9%

JSON

Cross-site scripting (XSS) vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the email address field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD

Node

smartertoolssmartertrackRange≤4.0.3483

smartertoolssmartertrackMatch3.0.3040

smartertoolssmartertrackMatch3.1.3050

smartertoolssmartertrackMatch3.1.3089

smartertoolssmartertrackMatch3.5.3126

smartertoolssmartertrackMatch3.5.3159

smartertoolssmartertrackMatch3.5.3167

smartertoolssmartertrackMatch3.6.3216

smartertoolssmartertrackMatch3.6.3217

smartertoolssmartertrackMatch3.6.3229

smartertoolssmartertrackMatch3.6.3246

smartertoolssmartertrackMatch3.6.3267

smartertoolssmartertrackMatch3.6.3274

smartertoolssmartertrackMatch3.6.3309

smartertoolssmartertrackMatch3.6.3355

smartertoolssmartertrackMatch3.6.3411

smartertoolssmartertrackMatch3.6.3413

smartertoolssmartertrackMatch4.0.3387

smartertoolssmartertrackMatch4.0.3399

smartertoolssmartertrackMatch4.0.3411

smartertoolssmartertrackMatch4.0.3413

smartertoolssmartertrackMatch4.0.3435

CPENameOperatorVersion
smartertools:smartertracksmartertools smartertrackle4.0.3483
smartertools:smartertracksmartertools smartertrackeq3.0.3040
smartertools:smartertracksmartertools smartertrackeq3.1.3050
smartertools:smartertracksmartertools smartertrackeq3.1.3089
smartertools:smartertracksmartertools smartertrackeq3.5.3126
smartertools:smartertracksmartertools smartertrackeq3.5.3159
smartertools:smartertracksmartertools smartertrackeq3.5.3167
smartertools:smartertracksmartertools smartertrackeq3.6.3216
smartertools:smartertracksmartertools smartertrackeq3.6.3217
smartertools:smartertracksmartertools smartertrackeq3.6.3229

CPE	Name	Operator	Version
smartertools:smartertrack	smartertools smartertrack	le	4.0.3483
smartertools:smartertrack	smartertools smartertrack	eq	3.0.3040
smartertools:smartertrack	smartertools smartertrack	eq	3.1.3050
smartertools:smartertrack	smartertools smartertrack	eq	3.1.3089
smartertools:smartertrack	smartertools smartertrack	eq	3.5.3126
smartertools:smartertrack	smartertools smartertrack	eq	3.5.3159
smartertools:smartertrack	smartertools smartertrack	eq	3.5.3167
smartertools:smartertrack	smartertools smartertrack	eq	3.6.3216
smartertools:smartertrack	smartertools smartertrack	eq	3.6.3217
smartertools:smartertrack	smartertools smartertrack	eq	3.6.3229