CVE-2009-4999
20.09.2010, 22:00
Cross-site scripting (XSS) vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-016 allows remote attackers to inject arbitrary web script or HTML via the Name field.
| Vendor | Product | Version |
|---|---|---|
| ibm | filenet_p8_application_engine | 3.5.1 |
| ibm | filenet_p8_application_engine | 3.5.1:001 |
| ibm | filenet_p8_application_engine | 3.5.1:002 |
| ibm | filenet_p8_application_engine | 3.5.1:003 |
| ibm | filenet_p8_application_engine | 3.5.1:004 |
| ibm | filenet_p8_application_engine | 3.5.1:005 |
| ibm | filenet_p8_application_engine | 3.5.1:006 |
| ibm | filenet_p8_application_engine | 3.5.1:007 |
| ibm | filenet_p8_application_engine | 3.5.1:008 |
| ibm | filenet_p8_application_engine | 3.5.1:009 |
| ibm | filenet_p8_application_engine | 3.5.1:010 |
| ibm | filenet_p8_application_engine | 3.5.1:011 |
| ibm | filenet_p8_application_engine | 3.5.1:012 |
| ibm | filenet_p8_application_engine | 3.5.1:013 |
| ibm | filenet_p8_application_engine | 3.5.1:014 |
| ibm | filenet_p8_application_engine | 3.5.1:015 |
𝑥
= Vulnerable software versions