CVE-2009-3029

Cross-site scripting (XSS) vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote…

published October 15, 2009

CVSS
—
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01048 · 63.9th percentile
Published
2009-10-15T10:00Z
EPSS history
Timeline
  • 15 OCT 10:00Z
    Cross-site scripting (XSS) vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote…
    cvelistv5