Cross-Site Scripting Vulnerabilities in APC Switched Rack PDU and Other Devices
CVE-2009-1798

Currently unrated

Key Information:

Vendor

Apc

Status
Network Management Card
Switched Rack Pdu
Vendor
CVE Published:
28 December 2009

What is CVE-2009-1798?

Multiple cross-site scripting vulnerabilities were identified in the Network Management Card (NMC) of American Power Conversion (APC) Switched Rack PDU and other related devices. These vulnerabilities enable remote attackers to inject arbitrary web scripts or HTML through unspecified vectors, potentially compromising the security of affected systems and enabling unauthorized access to sensitive data.

References

http://holisticinfosec.org/content/view/111/45/
x_refsource_MISC
http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_...
x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/166739
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.