CVEvulnerability
CVE-2009-4608
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-01-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Canon IT Solutions Inc. ACCESSGUARDIAN 3.0.14 and earlier, and 3.5.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to authentication.
Affected configurations
• canon-its accessguardian (>= 3.0 <= 3.0.14)
• canon-its accessguardian (>= 3.5 <= 3.5.6)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://canon-its.jp/guardian/topics/200910ag.html Vendor Advisory
- http://jvn.jp/en/jp/JVN33822756/index.html Third Party Advisory, VDB Entry
- http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000066.html Third Party Advisory, VDB Entry
- http://osvdb.org/59058 Broken Link
- http://secunia.com/advisories/37045 Third Party Advisory
- http://www.vupen.com/english/advisories/2009/2973 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53822 Third Party Advisory, VDB Entry
- http://canon-its.jp/guardian/topics/200910ag.html Vendor Advisory
- http://jvn.jp/en/jp/JVN33822756/index.html Third Party Advisory, VDB Entry
- http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000066.html Third Party Advisory, VDB Entry
- http://osvdb.org/59058 Broken Link
- http://secunia.com/advisories/37045 Third Party Advisory
- http://www.vupen.com/english/advisories/2009/2973 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53822 Third Party Advisory, VDB Entry