XSS in Apache Geronimo
CVE-2009-0038
Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) usern…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.180 (96.9th percentile) — read the EPSS interpretation.
Affected products
- Apache Geronimo — versions 2.1, 2.1.1, 2.1.2
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secalert@redhat.com (vdb-entry, x_refsource_VUPEN)
- secalert@redhat.com (Exploit, vdb-entry, x_refsource_BID)
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (Exploit, x_refsource_MISC)