Lucene search

K
cve[email protected]CVE-2009-4505
HistoryMar 26, 2010 - 6:30 p.m.

CVE-2009-4505

2010-03-2618:30:00
CWE-79
web.nvd.nist.gov
21
cve
2009
4505
opencms
oamp
comments
module
xss
vulnerabilities
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

Multiple cross-site scripting (XSS) vulnerabilities in OpenCMS OAMP Comments Module 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the name field in a comment, and other unspecified vectors.

Affected configurations

NVD
Node
alkaconoamp_commentsMatch1.0.1
AND
alkaconopencms

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

Related for CVE-2009-4505