Published: 06/05/2009 Updated: 10/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 470

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote malicious users to inject arbitrary web script or HTML via the query string to (1) applications/applications.jsf, (2) configuration/configuration.jsf, (3) customMBeans/customMBeans.jsf, (4) resourceNode/resources.jsf, (5) sysnet/registration.jsf, or (6) webService/webServicesGeneral.jsf; or the name parameter to (7) configuration/auditModuleEdit.jsf, (8) configuration/httpListenerEdit.jsf, or (9) resourceNode/jdbcResourceEdit.jsf.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle glassfish server 2.1

source: wwwsecurityfocuscom/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based aut ...

CWE-79 https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29669 http://www.nabble.com/Re:--DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p23002524.html http://www.securityfocus.com/bid/34824 http://dsecrg.com/pages/vul/show.php?id=134 https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29668 http://www.nabble.com/-DSECRG--Sun-Glassfish-Multiple-Security-Vulnerabilities-p22595435.html https://glassfish.dev.java.net/servlets/ReadMsg?list=cvs&msgNo=29675 http://osvdb.org/54255 http://osvdb.org/54250 http://osvdb.org/54249 http://osvdb.org/54256 http://osvdb.org/54254 http://www.vupen.com/english/advisories/2009/1255 http://osvdb.org/54257 http://osvdb.org/54251 http://osvdb.org/54253 http://osvdb.org/54252 http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000027.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-258528-1 http://www.securityfocus.com/bid/34914 http://jvn.jp/en/jp/JVN73653977/index.html https://exchange.xforce.ibmcloud.com/vulnerabilities/50453 http://www.securityfocus.com/archive/1/503236/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/32974/

Get Started

CVE-2009-1553

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect