CVE-2009-4052: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) the JSF Tree Control and (2) the JavaScript Resource Servlet.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4052?
CVE-2009-4052 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2009-4052?
To fix CVE-2009-4052, upgrade to IBM Rational Application Developer for WebSphere or Rational Software Architect version 7.0.0.10 or later.
What systems are affected by CVE-2009-4052?
CVE-2009-4052 affects multiple versions of IBM Rational Application Developer for WebSphere and Rational Software Architect before version 7.0.0.10.
What type of vulnerability is CVE-2009-4052?
CVE-2009-4052 is classified as a cross-site scripting (XSS) vulnerability.
Can CVE-2009-4052 be exploited remotely?
Yes, CVE-2009-4052 can be exploited by remote attackers injecting arbitrary web scripts or HTML.