CVE-2009-3731

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
4.3MEDIUM
EPSS
2.2%
top 15.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Vmware Stage ManagerVmware ESX ServerVmware LAB Manager+7 more
Timeline
PublishedDec 16
Latest updateMay 2

Description

Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x; VMware vCenter Lab Manager 3.x and 4.x before 4.0.1; VMware Stage Manager 1.x before 4.0.1; WebWorks Publisher 6.x through 8.x; WebWorks Publisher 2003; and WebWorks ePublisher 9.0.x through 9.3, 2008.1 through 2008.4, and 2009.x before 2009.3 allow remote attackers to inject arbitrary web script or H…

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages10 packages

▶NVDvmware/vcenter_lab_manager4 versions+3

Patches

Patch: www.securityfocus.com ↗Patch: www.webworks.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-mpjr-rv63-f738: Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2↗2022-05-02
▶
CVEList
CVE-2009-3731: Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2↗2009-12-16
▶
CVE-2009-3731 (MEDIUM CVSS 4.3) | Multiple cross-site scripting (XSS) | cvebase.io