Cross-Site Scripting Vulnerability in Symantec SecurityExpressions Audit and Compliance Server
CVE-2009-3029

Currently unrated

Key Information:

Vendor: Symantec
Status: Securityexpressions Audit And Compliance Server
Vendor: CVE Published:; 15 October 2009

What is CVE-2009-3029?

A Cross-Site Scripting (XSS) vulnerability exists in the console of Symantec SecurityExpressions Audit and Compliance Server, allowing remote authenticated users to inject arbitrary web scripts or HTML through manipulated external client inputs. This can lead to the execution of malicious scripts in the context of the user's session, potentially compromising security and data integrity.

References

http://www.vupen.com/english/advisories/2009/2849

vdb-entryx_refsource_VUPEN

http://secunia.com/advisories/36972

third-party-advisoryx_refsource_SECUNIA

http://www.osvdb.org/58651

vdb-entryx_refsource_OSVDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 15, 2009
Vulnerability Reserved
Aug 31, 2009