Security Advisory

CVE-2009-0857

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-03-09 21:00:00
Last updated 2024-08-07 04:48:52
Assigner mitre
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: this can be leveraged for access to the SunMC Web Console.