Lucene search

K
nvd[email protected]NVD:CVE-2009-5097
HistorySep 13, 2011 - 7:59 p.m.

CVE-2009-5097

2011-09-1319:59:25
CWE-94
web.nvd.nist.gov

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

7.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.

Affected configurations

NVD
Node
hppalm_pre_webosRange1.1.0
OR
hppalm_pre_webosMatch1.0.2
OR
hppalm_pre_webosMatch1.0.3
OR
hppalm_pre_webosMatch1.0.4

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

7.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

Related for NVD:CVE-2009-5097