CVE-2013-0009

CVE Database · CVE-2013-0009

CVE-2013-0009

· N/AModified

CVSS v3.1

N/A

EPSS

13.64%

Published

Jan 9, 2013

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0010.

Weaknesses (CWE)

CWE-79

Affected Products (2)

microsoft · system_center_operations_managervulnerable

References (6)

http://www.us-cert.gov/cas/techalerts/TA13-008A.html

Third Party AdvisoryUS Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-003

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15760

http://www.us-cert.gov/cas/techalerts/TA13-008A.html

Third Party AdvisoryUS Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-003

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15760

KEV Catalog EPSS Scores Vendors All CVEs