CVE-2009-0611: XSS

Published Feb 17, 2009

Updated

Multiple cross-site scripting (XSS) vulnerabilities in qfsearch/AdminServlet in QuickFinder Server in Novell Open Enterprise Server 1.x allow remote attackers to inject arbitrary web script or HTML via (1) the siteloc parameter in a displayaddsite action, the site parameter in a (2) generalproperties or (3) clusterserviceproperties action, (4) the adminurl parameter in a global action, or (5) the print-list parameter.

Affected Software

1 affected component

Micro Focus Open Enterprise Server=1.x

Event History

Feb 17, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

via NVD·05:30 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-0611?

CVE-2009-0611 is classified as a medium severity vulnerability due to its potential for exploitation using cross-site scripting.

How do I fix CVE-2009-0611?

To fix CVE-2009-0611, apply the latest patches provided by Novell for Open Enterprise Server 1.x to mitigate the XSS vulnerabilities.

What types of attacks are possible due to CVE-2009-0611?

CVE-2009-0611 allows attackers to perform cross-site scripting attacks, potentially leading to data theft or session hijacking.

Which versions of Novell Open Enterprise Server are affected by CVE-2009-0611?

CVE-2009-0611 affects Novell Open Enterprise Server version 1.x.

Can CVE-2009-0611 be exploited remotely?

Yes, CVE-2009-0611 can be exploited remotely by attackers through the affected web application parameters.