CVE-2009-5099

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.13%

Published

Sep 13, 2011

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attackers to inject arbitrary web script or HTML via the outputType parameter.

Weaknesses (CWE)

CWE-79

Affected Products (3)

pentaho · bi_servervulnerable

References (10)

http://antisnatchor.com/2009/06/20/pentaho-1701062-multiple-vulnerabilities/

Exploit

http://jira.pentaho.com/browse/BISERVER-2698?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

Exploit

http://secunia.com/advisories/37024

Vendor Advisory

http://www.securityfocus.com/archive/1/507168/100/0/threaded

http://www.vupen.com/english/advisories/2009/2972

Vendor Advisory

http://antisnatchor.com/2009/06/20/pentaho-1701062-multiple-vulnerabilities/

Exploit

http://jira.pentaho.com/browse/BISERVER-2698?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

Exploit

http://secunia.com/advisories/37024

Vendor Advisory

http://www.securityfocus.com/archive/1/507168/100/0/threaded

http://www.vupen.com/english/advisories/2009/2972

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs