Lucene search
MitreCVE-2009-4999HistorySep 20, 2010 - 10:00 p.m.
CVE-2009-4999
2010-09-2022:00:03
CWE-79
mitre
web.nvd.nist.gov
25
cve-2009-4999
cross-site scripting
xss
ibm filenet
p8ae
workplace component
nvd
security vulnerability
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
47.2%
Cross-site scripting (XSS) vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-016 allows remote attackers to inject arbitrary web script or HTML via the Name field.
Affected configurations
Node
ibmfilenet_p8_application_engineMatch3.5.1
ORibmfilenet_p8_application_engineMatch3.5.1001
ORibmfilenet_p8_application_engineMatch3.5.1002
ORibmfilenet_p8_application_engineMatch3.5.1003
ORibmfilenet_p8_application_engineMatch3.5.1004
ORibmfilenet_p8_application_engineMatch3.5.1005
ORibmfilenet_p8_application_engineMatch3.5.1006
ORibmfilenet_p8_application_engineMatch3.5.1007
ORibmfilenet_p8_application_engineMatch3.5.1008
ORibmfilenet_p8_application_engineMatch3.5.1009
ORibmfilenet_p8_application_engineMatch3.5.1010
ORibmfilenet_p8_application_engineMatch3.5.1011
ORibmfilenet_p8_application_engineMatch3.5.1012
ORibmfilenet_p8_application_engineMatch3.5.1013
ORibmfilenet_p8_application_engineMatch3.5.1014
ORibmfilenet_p8_application_engineMatch3.5.1015
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | filenet_p8_application_engine | 3.5.1 | cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:*:*:*:*:*:*:* |
| ibm | filenet_p8_application_engine | 3.5.1 | cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:001:*:*:*:*:*:* |
| ibm | filenet_p8_application_engine | 3.5.1 | cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:002:*:*:*:*:*:* |
| ibm | filenet_p8_application_engine | 3.5.1 | cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:003:*:*:*:*:*:* |
| ibm | filenet_p8_application_engine | 3.5.1 | cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:004:*:*:*:*:*:* |
| ibm | filenet_p8_application_engine | 3.5.1 | cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:005:*:*:*:*:*:* |
| ibm | filenet_p8_application_engine | 3.5.1 | cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:006:*:*:*:*:*:* |
| ibm | filenet_p8_application_engine | 3.5.1 | cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:007:*:*:*:*:*:* |
| ibm | filenet_p8_application_engine | 3.5.1 | cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:008:*:*:*:*:*:* |
| ibm | filenet_p8_application_engine | 3.5.1 | cpe:2.3:a:ibm:filenet_p8_application_engine:3.5.1:009:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2010-09-20 22:00:00
cvelist
cvelist
CVE-2009-4999
2010-09-20 21:00:00
nvd
nvd
CVE-2009-4999
2010-09-20 22:00:03
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
47.2%
Related for CVE-2009-4999