CVE-2009-4052

Published: Nov 23, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) the JSF Tree Control and (2) the JavaScript Resource Servlet.

Affected (20)

Products: Ibm: Rational Application Developer For Websphere, Rational Software Architect

Ibm

2 products

Rational Application Developer For Websphere

Rational Software Architect

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Application Developer For Websphere	Version 7.0.0.1
Ibm Rational Application Developer For Websphere	Version 7.0.0.2
Ibm Rational Application Developer For Websphere	Version 7.0.0.3
Ibm Rational Application Developer For Websphere	Version 7.0.0.4
Ibm Rational Application Developer For Websphere	Version 7.0.0.5
Ibm Rational Application Developer For Websphere	Version 7.0.0.6
Ibm Rational Application Developer For Websphere	Version 7.0.0.7
Ibm Rational Application Developer For Websphere	Version 7.0.0.8
Ibm Rational Application Developer For Websphere	Version 7.0.0.9
Ibm Rational Application Developer For Websphere	Version 7.0
Ibm Rational Software Architect	Version 7.0.0.0
Ibm Rational Software Architect	Version 7.0.0.1
Ibm Rational Software Architect	Version 7.0.0.2
Ibm Rational Software Architect	Version 7.0.0.3
Ibm Rational Software Architect	Version 7.0.0.4
Ibm Rational Software Architect	Version 7.0.0.5
Ibm Rational Software Architect	Version 7.0.0.6
Ibm Rational Software Architect	Version 7.0.0.7
Ibm Rational Software Architect	Version 7.0.0.8
Ibm Rational Software Architect	Version 7.0.0.9