CVE-2009-0038

Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote…

published April 17, 2009

CVSS

—

EPSS

18%

Percentile

97.2

In the wild

Unconfirmed

What it is

Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) description parameter to console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.18003 · 97.2th percentile
Published: 2009-04-17T14:00Z

EPSS history

Timeline

17 APR 14:00Z
Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote…
cvelistv5