Cross-Site Scripting Vulnerability in IBM Rational AppScan Enterprise Edition
CVE-2009-3745

Currently unrated

Key Information:

Vendor
IBM
Status
Rational Appscan
Vendor
CVE Published:
22 October 2009

Summary

A cross-site scripting (XSS) vulnerability exists in the help pages of IBM Rational AppScan Enterprise Edition 5.5.0.2, allowing attackers to inject arbitrary web scripts or HTML through crafted query strings. This enables potential exploitation by malicious users, leading to unauthorized actions and data exposure. Implementing appropriate input validation measures can help mitigate this risk.

References

http://secunia.com/advisories/37093
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/2974
vdb-entryx_refsource_VUPEN
http://www-01.ibm.com/support/docview.wss?uid=swg24024704
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.