CVE-2009-3816

CWE-79 — Cross-site Scripting (XSS)4 documents4 sources
Severity
4.3MEDIUM
EPSS
0.3%
top 47.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Lotus Connections
Timeline
PublishedOct 28
Latest updateMay 2

Description

Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-32pf-5hm5-f9mf: Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2↗2022-05-02
▶
CVEList
CVE-2009-3816: Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2↗2009-10-28
▶

💥Exploits & PoCs

1
Exploit-DB
WinRadius Server 2009 - Denial of Service↗2012-05-29
▶
CVE-2009-3816 (MEDIUM CVSS 4.3) | Multiple cross-site scripting (XSS) | cvebase.io