CVE-2009-1729

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3 allow remote attackers to inject…

published May 21, 2009

CVSS
—
EPSS
5%
Percentile
92.6
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the abperson_displayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Address Book component or (2) the temporaryCalendars parameter to uwc/base/UWCMain.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05326 · 92.6th percentile
Published
2009-05-21T14:00Z
EPSS history
Timeline
  • 21 MAY 14:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3 allow remote attackers to inject…
    cvelistv5