CVEvulnerability
CVE-2009-3745
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-10-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inject arbitrary web script or HTML via the query string.
Affected configurations
• ibm rational appscan 5.5.0.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/37093 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK97516 Exploit
- http://www-01.ibm.com/support/docview.wss?uid=swg24024704 Patch
- http://www.securityfocus.com/bid/36734 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2974 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53821 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/37093 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK97516 Exploit
- http://www-01.ibm.com/support/docview.wss?uid=swg24024704 Patch
- http://www.securityfocus.com/bid/36734 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2974 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53821 exchange.xforce.ibmcloud.com