Unscored severity · published Jul 1, 2009
CVE-2009-2283
Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JW
Java Web Console · Sun
3.0.2; 3.0.2; 3.0.2; 3.0.2; 3.0.2; 3.0.2; +15 more · source: NVD
SO
Solaris · Sun
10; 10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2283
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2283
secunia.com
http://secunia.com/advisories/35597
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-136987-03-1
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-262428-1
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020659.1-1
More from Java Web Console
–
CVE-2008-5550
Open redirect vulnerability in console/faces/jsp/login/BeginLogin.jsp in Sun Java Web Console 3.0.2 through 3.0.5 and Solaris 10 allows remote attackers to redirect users to…
–
CVE-2008-1286
Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended access restrictions and determine the existence of files or…
–
CVE-2007-1681
Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service (application crash),…