CVE-2009-4052

2009-11-2317:00:00

mitre

www.cve.org

5.6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) the JSF Tree Control and (2) the JavaScript Resource Servlet.

References

secunia.com/advisories/37442

www-01.ibm.com/support/docview.wss?uid=swg1PK90616

www-01.ibm.com/support/docview.wss?uid=swg1PK94324

www-01.ibm.com/support/docview.wss?uid=swg27012378

www-01.ibm.com/support/docview.wss?uid=swg27012558

www.osvdb.org/60319

www.securityfocus.com/bid/37083

exchange.xforce.ibmcloud.com/vulnerabilities/54360