CVE-2009-4239

2009-12-0919:00:00

mitre

www.cve.org

5.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.0%

JSON

Cross-site scripting (XSS) vulnerability in the Web console in IBM InfoSphere Information Server 8.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

secunia.com/advisories/37556

www-01.ibm.com/support/docview.wss?uid=swg1JR32573

www-01.ibm.com/support/docview.wss?uid=swg21406224

www.osvdb.org/60806

www.securityfocus.com/bid/37246

www.vupen.com/english/advisories/2009/3432

exchange.xforce.ibmcloud.com/vulnerabilities/54608