CVE-2009-2907 Multiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Management Suite (AMS) before 2.0.0.SR4, Hyperic HQ Open Source before 4.2.x, Hyperic HQ...
MediumCVSS 4.3
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Management Suite (AMS) before 2.0.0.SR4, Hyperic HQ Open Source before 4.2.x, Hyperic HQ 4.0 Enterprise before 4.0.3.2, and Hyperic HQ 4.1 Enterprise before 4.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the description field and unspecified "input fields."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| springsource application management suite | <= 2.0.0 | No fix listed |
| springsource hyperic hq | <= 4.0.0 | No fix listed |
| springsource hyperic hq | <= 4.1.0 | No fix listed |
| springsource hyperic hq | <= 4.2 | No fix listed |
| springsource tc server | <= 6.0.20 | No fix listed |
References
- 38913 exploit vdb-entry
- www.springsource.com vendor-advisory