CVEvulnerability
CVE-2009-4239
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-12-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Web console in IBM InfoSphere Information Server 8.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm infosphere information server 8.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/37556 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR32573 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21406224 www-01.ibm.com
- http://www.osvdb.org/60806 www.osvdb.org
- http://www.securityfocus.com/bid/37246 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3432 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54608 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/37556 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR32573 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21406224 www-01.ibm.com
- http://www.osvdb.org/60806 www.osvdb.org
- http://www.securityfocus.com/bid/37246 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3432 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54608 exchange.xforce.ibmcloud.com