Unscored severity · published Mar 24, 2009
CVE-2009-1055
Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev
–
CVSS
1.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Cms · Sitecore
5.3.0; 5.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1055
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1055
sdn5.sitecore.net
http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx
Vendor Advisory
http://secunia.com/advisories/34356
www.securityfocus.com
http://www.securityfocus.com/archive/1/501929/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/34162
Vendor Advisory
http://www.vupen.com/english/advisories/2009/0753
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/49298
More from Cms
9.8
CVE-2019-9874
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
8.8
CVE-2019-9875
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
6.1
CVE-2019-11198
Multiple cross-site scripting (XSS) vulnerabilities in Sitecore CMS 9.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) #300583 - List…
5.4
CVE-2017-11439
In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter
4.9
CVE-2017-11440
In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter