Unrated severityNVD Advisory· Published Oct 13, 2009· Updated Apr 23, 2026
CVE-2009-2898
CVE-2009-2898
Description
Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.0.x before 4.0.3.1, 4.1.x before 4.1.2.1, and 4.2-beta1; Application Management Suite (AMS) 2.0.0.SR3; and tc Server 6.0.20.B allows remote authenticated users to inject arbitrary web script or HTML via the Description field. NOTE: some of these details are obtained from third party information.
Affected products
18- cpe:2.3:a:springsource:application_management_suite:2.0.0:sr3:*:*:*:*:*:*
cpe:2.3:a:springsource:hyperic_hq:3.2.0:*:*:*:*:*:*:*+ 15 more
- cpe:2.3:a:springsource:hyperic_hq:3.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:3.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:3.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:3.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:3.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:3.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:3.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:3.2:beta_1:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:springsource:hyperic_hq:4.2:beta_1:*:*:*:*:*:*
- cpe:2.3:a:springsource:tc_server:6.0.20:b:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- www.coresecurity.com/content/hyperic-hq-vulnerabilitiesnvdPatch
- www.springsource.com/security/hyperic-hqnvdPatchVendor Advisory
- corelabs.coresecurity.com/index.phpnvdExploitPatch
- secunia.com/advisories/36935nvdVendor Advisory
- jira.hyperic.com/browse/HHQ-3390nvd
- www.osvdb.org/58611nvd
- www.securityfocus.com/archive/1/506935/100/0/threadednvd
- www.securityfocus.com/archive/1/506950/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/53660nvd
News mentions
0No linked articles in our index yet.