CVEvulnerability
CVE-2009-1553
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-05-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) applications/applications.jsf, (2) configuration/configuration.jsf, (3) customMBeans/customMBeans.jsf, (4) resourceNode/resources.jsf, (5) sysnet/registration.jsf, or (6) webService/webServicesGeneral.jsf; or the name parameter to (7) configuration/auditModuleEdit.jsf, (8) configuration/httpListenerEdit.jsf, or (9) resourceNode/jdbcResourceEdit.jsf.
Affected configurations
• oracle glassfish server 2.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://dsecrg.com/pages/vul/show.php?id=134 Exploit
- http://jvn.jp/en/jp/JVN73653977/index.html jvn.jp
- http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000027.html jvndb.jvn.jp
- http://osvdb.org/54249 osvdb.org
- http://osvdb.org/54250 osvdb.org
- http://osvdb.org/54251 osvdb.org
- http://osvdb.org/54252 osvdb.org
- http://osvdb.org/54253 osvdb.org
- http://osvdb.org/54254 osvdb.org
- http://osvdb.org/54255 osvdb.org
- http://osvdb.org/54256 osvdb.org
- http://osvdb.org/54257 osvdb.org
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258528-1 sunsolve.sun.com
- http://www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html Exploit
- http://www.nabble.com/Re:--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html www.nabble.com
- http://www.securityfocus.com/archive/1/503236/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/34824 Exploit
- http://www.securityfocus.com/bid/34914 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1255 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50453 exchange.xforce.ibmcloud.com
- https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29668 Patch, Vendor Advisory
- https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29669 Patch, Vendor Advisory
- https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29675 Patch, Vendor Advisory
- http://dsecrg.com/pages/vul/show.php?id=134 Exploit
- http://jvn.jp/en/jp/JVN73653977/index.html jvn.jp
- http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000027.html jvndb.jvn.jp
- http://osvdb.org/54249 osvdb.org
- http://osvdb.org/54250 osvdb.org
- http://osvdb.org/54251 osvdb.org
- http://osvdb.org/54252 osvdb.org
- http://osvdb.org/54253 osvdb.org
- http://osvdb.org/54254 osvdb.org
- http://osvdb.org/54255 osvdb.org
- http://osvdb.org/54256 osvdb.org
- http://osvdb.org/54257 osvdb.org
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258528-1 sunsolve.sun.com
- http://www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html Exploit
- http://www.nabble.com/Re:--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html www.nabble.com
- http://www.securityfocus.com/archive/1/503236/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/34824 Exploit
- http://www.securityfocus.com/bid/34914 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1255 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50453 exchange.xforce.ibmcloud.com
- https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29668 Patch, Vendor Advisory
- https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29669 Patch, Vendor Advisory
- https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29675 Patch, Vendor Advisory