VulnerabilityModified
CVE-2009-0548
Cross-site scripting (XSS) vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MEDIUM 4.3EPSS 1.95%
Does this matter?
Lower severity and a low EPSS score (1.95%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.95% probability · 79th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- eset/remote administrator
- Source
- cve@mitre.org
References
- http://osvdb.org/51804
- http://secunia.com/advisories/33805Vendor Advisory
- http://www.eset.eu/support/changelog-eset-remote-administrator-3Vendor Advisory
- http://www.vupen.com/english/advisories/2009/0339
- http://osvdb.org/51804
- http://secunia.com/advisories/33805Vendor Advisory
- http://www.eset.eu/support/changelog-eset-remote-administrator-3Vendor Advisory
- http://www.vupen.com/english/advisories/2009/0339
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.