CVEvulnerability
CVE-2009-3521
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-10-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Visualization Engine (VE) in IBM Tivoli Composite Application Manager for WebSphere (ITCAM) 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm tivoli composite application manager for wesbsphere 6.1.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/36901 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg1PK90126 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36551 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2797 Vendor Advisory
- http://secunia.com/advisories/36901 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg1PK90126 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36551 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2797 Vendor Advisory