CVE - CVE-2009-2405

CVE-ID
CVE-2009-2405	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML via the (1) monitorName, (2) objectName, (3) attribute, or (4) period parameter to createSnapshot.jsp, or the (5) monitorName, (6) objectName, (7) attribute, (8) threshold, (9) period, or (10) enabled parameter to createThresholdMonitor.jsp. NOTE: some of these details are obtained from third party information.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1023315 URL:http://securitytracker.com/id?1023315 MISC:35680 URL:http://secunia.com/advisories/35680 MISC:37276 URL:http://www.securityfocus.com/bid/37276 MISC:37671 URL:http://secunia.com/advisories/37671 MISC:60898 URL:~~http://www.osvdb.org/60898~~ (Obsolete source) MISC:60899 URL:~~http://www.osvdb.org/60899~~ (Obsolete source) MISC:RHSA-2009:1636 URL:https://rhn.redhat.com/errata/RHSA-2009-1636.html MISC:RHSA-2009:1637 URL:https://rhn.redhat.com/errata/RHSA-2009-1637.html MISC:RHSA-2009:1649 URL:https://rhn.redhat.com/errata/RHSA-2009-1649.html MISC:RHSA-2009:1650 URL:https://rhn.redhat.com/errata/RHSA-2009-1650.html MISC:https://bugzilla.redhat.com/show_bug.cgi?id=510023 URL:https://bugzilla.redhat.com/show_bug.cgi?id=510023 MISC:https://jira.jboss.org/jira/browse/JBAS-7105 URL:https://jira.jboss.org/jira/browse/JBAS-7105 MISC:https://jira.jboss.org/jira/browse/JBPAPP-2274 URL:https://jira.jboss.org/jira/browse/JBPAPP-2274 MISC:https://jira.jboss.org/jira/browse/JBPAPP-2284 URL:https://jira.jboss.org/jira/browse/JBPAPP-2284 MISC:jboss-createsnapshot-xss(54700) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/54700
Assigning CNA
Red Hat, Inc.
Date Record Created
20090709	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090709)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)