Unscored severity · published Mar 4, 2009
CVE-2009-0809
The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the…
–
CVSS
0.9%
EPSS
No
On KEV
Description
The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Catia · Ibm
through 5.18; 5.16; 5.17 · source: NVD
ES
Enovia Smarteam · 3ds
through 5.18 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0809
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0809
Vendor Advisory
http://secunia.com/advisories/34037
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332
www.securityfocus.com
http://www.securityfocus.com/bid/33895
Vendor Advisory
http://www.vupen.com/english/advisories/2009/0525