CVE-2009-3521

Multiple cross-site scripting (XSS) vulnerabilities in the Visualization Engine (VE) in IBM Tivoli Composite Application Manager for WebSphere (ITCAM) 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
VendorProductVersion
ibmtivoli_composite_application_manager_for_wesbsphere
6.1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/36901
http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg1PK90126
http://www.securityfocus.com/bid/36551
http://www.vupen.com/english/advisories/2009/2797
http://secunia.com/advisories/36901
http://www-01.ibm.com/support/docview.wss?rs=71&uid=swg1PK90126
http://www.securityfocus.com/bid/36551
http://www.vupen.com/english/advisories/2009/2797