Lucene search
HistoryMar 25, 2009 - 6:30 p.m.
CVE-2009-1088
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
7.5
Confidence
High
EPSS
0.018
Percentile
88.3%
Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with “extension elements and extension functions” that trigger code execution by Xalan-Java, as demonstrated using xalan://java.lang.Runtime.
Affected configurations
Node
hannonhillcascadeMatch5.7svr
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hannonhill | cascade | 5.7 | cpe:2.3:a:hannonhill:cascade:5.7:svr:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2009-1088
2009-03-25 18:00:00
cve
cve
CVE-2009-1088
2009-03-25 18:30:00
exploitdb
exploitdb
Hannon Hill Cascade Server - (Authenticated) Command Execution
2009-03-19 00:00:00
prion
prion
Code injection
2009-03-25 18:30:00
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
7.5
Confidence
High
EPSS
0.018
Percentile
88.3%
Related for NVD:CVE-2009-1088