CVE-2009-2907

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.20%

Published

Mar 24, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBSpringSource (Multiple Products) - Multiple HTML Injection Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Management Suite (AMS) before 2.0.0.SR4, Hyperic HQ Open Source before 4.2.x, Hyperic HQ 4.0 Enterprise before 4.0.3.2, and Hyperic HQ 4.1 Enterprise before 4.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the description field and unspecified "input fields."

Weaknesses (CWE)

CWE-79

Affected Products (5)

springsource · application_management_suitevulnerable

springsource · hyperic_hqvulnerable

springsource · tc_servervulnerable

References (4)

http://www.securityfocus.com/bid/38913

Exploit

http://www.springsource.com/security/cve-2009-2907

Vendor Advisory

http://www.securityfocus.com/bid/38913

Exploit

http://www.springsource.com/security/cve-2009-2907

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs