CVEvulnerability
CVE-2009-0877
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-03-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the (1) Full Name or (2) Subject field.
Affected configurations
• sun java system communications express
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/52718 osvdb.org
- http://sosoblood.freehostia.com/SJSC/html_injection.gif Exploit
- http://www.securityfocus.com/archive/1/501672/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/34083 Exploit
- http://osvdb.org/52718 osvdb.org
- http://sosoblood.freehostia.com/SJSC/html_injection.gif Exploit
- http://www.securityfocus.com/archive/1/501672/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/34083 Exploit