CVE-2009-0857: XSS
Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: this can be leveraged for access to the SunMC Web Console.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0857?
CVE-2009-0857 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2009-0857?
To fix CVE-2009-0857, it is recommended to upgrade to Sun Management Center version 4.0 or later.
What software is affected by CVE-2009-0857?
CVE-2009-0857 affects Sun Management Center versions 3.6.1 and 4.0.
Can CVE-2009-0857 be exploited remotely?
Yes, CVE-2009-0857 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.
Is there a workaround for CVE-2009-0857?
There are no specific workarounds for CVE-2009-0857 other than applying the necessary software updates.