CVE-2009-0857 - Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter

Published Mar 9, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 1.94%

Description

Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: this can be leveraged for access to the SunMC Web Console.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (7)

http://secunia.com/advisories/34146
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1021809
vdb-entryx_refsource_SECTRACK
http://sunsolve.sun.com/search/document.do?assetkey=1-21-125191-04-1
x_refsource_CONFIRMPatch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-247046-1
vendor-advisoryx_refsource_SUNALERTPatchVendor Advisory
http://www.securityfocus.com/bid/33999
vdb-entryx_refsource_BIDPatch
http://www.vupen.com/english/advisories/2009/0605
vdb-entryx_refsource_VUPENPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49076
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/34146		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1021809		vdb-entryx_refsource_SECTRACK
http://sunsolve.sun.com/search/document.do?assetkey=1-21-125191-04-1		x_refsource_CONFIRMPatch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-247046-1		vendor-advisoryx_refsource_SUNALERTPatchVendor Advisory
http://www.securityfocus.com/bid/33999		vdb-entryx_refsource_BIDPatch
http://www.vupen.com/english/advisories/2009/0605		vdb-entryx_refsource_VUPENPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49076		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 9, 2009

Updated Aug 7, 2024

Reserved Mar 9, 2009

Link CVE-2009-0857

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-0857

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-0857