Unrated severityNVD Advisory· Published Dec 21, 2009· Updated Jun 16, 2026
CVE-2009-4372
CVE-2009-4372
Description
AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary commands via shell metacharacters in the uniqueid parameter to (1) wcl.php, (2) storage_graphs.php, (3) storage_graphs2.php, (4) storage_graphs3.php, and (5) storage_graphs4.php in sem/.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-1:*:*:*:*:*:*:*
- cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-2:*:*:*:*:*:*:*
- cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-3:*:*:*:*:*:*:*
- Range: <2.1.5-4
Patches
Vulnerability mechanics
References
11- www.alienvault.com/community.phpnvdExploit
- www.cybsec.com/vuln/OSSIM_2_1_5_Remote_Command_Execution.pdfnvdExploit
- www.exploit-db.com/exploits/10480nvdExploit
- www.securityfocus.com/bid/37375nvdExploit
- secunia.com/advisories/37727nvdVendor Advisory
- osvdb.org/61151nvd
- osvdb.org/61152nvd
- osvdb.org/61153nvd
- osvdb.org/61154nvd
- osvdb.org/61155nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/54843nvd
News mentions
0No linked articles in our index yet.