Every CVE Search/ Get API key

CVE-2009-2405

Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server...

4.3 Medium

Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML via the (1) monitorName, (2) objectName, (3) attribute, or (4) period parameter to createSnapshot.jsp, or the (5) monitorName, (6) objectName, (7) attribute, (8) threshold, (9) period, or (10) enabled parameter to createThresholdMonitor.jsp. NOTE: some of these details are obtained from third party information.

Exploit likelihood

2.53%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML via the (1) monitorName, (2) objectName, (3) attribute, or (4) period parameter to createSnapshot.jsp, or the (5) monitorName, (6) objectName, (7) attribute, (8) threshold, (9) period, or (10) enabled parameter to createThresholdMonitor.jsp. NOTE: some of these details are obtained from third party information.

Record
CVE-2009-2405
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML via the (1) monitorName, (2) objectName, (3) attribute, or (4) period parameter to createSnapshot.jsp, or the (5) monitorName, (6) objectName, (7) attribute, (8) threshold, (9) period, or (10) enabled parameter to createThresholdMonitor.jsp. NOTE: some of these details are obtained from third party information.

Record
CVE-2009-2405
Updated
2026-11-02
EUVDEUVD-2009-2401 No score

Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML via the (1) monitorName, (2) objectName, (3) attribute, or (4) period parameter to createSnapshot.jsp, or the (5) monitorName, (6) objectName, (7) attribute, (8) threshold, (9) period, or (10) enabled parameter to createThresholdMonitor.jsp. NOTE: some of these details are obtained from third party information.

Record
EUVD-2009-2401
Updated
2026-11-03
GitHub AdvisoriesGHSA-4q38-x98f-3p77 No score

Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server...

Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML via the (1) monitorName, (2) objectName, (3) attribute, or (4) period parameter to createSnapshot.jsp, or the (5) monitorName, (6) objectName, (7) attribute, (8) threshold, (9) period, or (10) enabled parameter to createThresholdMonitor.jsp. NOTE: some of these details are obtained from third party information.

Record
GHSA-4q38-x98f-3p77
Weakness
CWE-79
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glassfish-javamail
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.4.2-0jpp.ep1.5.el4
0:1.4.2-0jpp.ep1.5.el4
glassfish-jaxb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.1.4-1.12.patch03.ep1.el4
0:2.1.4-1.12.patch03.ep1.el4
glassfish-jaxb-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.1.4-1.12.patch03.ep1.el4
0:2.1.4-1.12.patch03.ep1.el4
glassfish-jsf
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.2_13-2.1.ep1.el4
0:1.2_13-2.1.ep1.el4
hibernate3
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11.GA_CP02.ep1.el4
0:3.3.1-1.11.GA_CP02.ep1.el4
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11.GA_CP02.ep1.el4
0:3.3.1-1.11.GA_CP02.ep1.el4
hibernate3-entitymanager
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.GA_CP01.ep1.el4
0:3.3.2-2.5.GA_CP01.ep1.el4
hibernate3-entitymanager-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.GA_CP01.ep1.el4
0:3.3.2-2.5.GA_CP01.ep1.el4
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
Show 114 moreShow less
Affected packages
PackageAffectedFixed
jacorb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.9.el4
0:2.3.0-1jpp.ep1.9.el4
jakarta-commons-logging-jboss
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.1-9.ep1.el4
0:1.1-9.ep1.el4
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.5.5-3.CP04.2.ep1.el4
0:1.5.5-3.CP04.2.ep1.el4
jboss-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-0jpp.ep1.3.el4
0:1.2.1-0jpp.ep1.3.el4
jboss-messaging
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.4.0-3.SP3_CP09.4.ep1.el4
0:1.4.0-3.SP3_CP09.4.ep1.el4
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.2.3-3.SP1.ep1.el4
0:2.2.3-3.SP1.ep1.el4
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4
jboss-seam2
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.2.FP-1.ep1.21.el4
0:2.0.2.FP-1.ep1.21.el4
jboss-seam2-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.2.FP-1.ep1.21.el4
0:2.0.2.FP-1.ep1.21.el4
jbossas
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.4.ep1.el4
0:4.3.0-6.GA_CP07.4.ep1.el4
jbossas-4.3.0.GA_CP07-bin
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.4.ep1.el4
0:4.3.0-6.GA_CP07.4.ep1.el4
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.4.ep1.el4
0:4.3.0-6.GA_CP07.4.ep1.el4
jbossts
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4
1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4
jbossweb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.0-6.CP12.0jpp.ep1.2.el4
0:2.0.0-6.CP12.0jpp.ep1.2.el4
jbossws
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.1-4.SP2_CP07.2.ep1.el4
0:2.0.1-4.SP2_CP07.2.ep1.el4
jbossws-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.0-2.GA_CP05.1.ep1.el4
0:1.0.0-2.GA_CP05.1.ep1.el4
jbossws-framework
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.1-1.GA_CP05.1.ep1.el4
0:2.0.1-1.GA_CP05.1.ep1.el4
jbossws-native42
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.1-4.SP2_CP07.2.ep1.el4
0:2.0.1-4.SP2_CP07.2.ep1.el4
jcommon
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.16-1.1.ep1.el4
0:1.0.16-1.1.ep1.el4
jfreechart
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.13-2.3.1.ep1.el4
0:1.0.13-2.3.1.ep1.el4
jgroups
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 1:2.4.7-1.ep1.el4
1:2.4.7-1.ep1.el4
quartz
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.5.2-1jpp.patch01.ep1.4.el4
0:1.5.2-1jpp.patch01.ep1.4.el4
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.ep1.3.el4
0:4.3.0-6.GA_CP07.ep1.3.el4
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.ep1.3.el4
0:4.3.0-6.GA_CP07.ep1.3.el4
xerces-j2
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.7.1-9jpp.4.patch_02.1.ep1.el4
0:2.7.1-9jpp.4.patch_02.1.ep1.el4
xml-security
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.3.0-1.3.patch01.ep1.2.el4
0:1.3.0-1.3.patch01.ep1.2.el4
glassfish-javamail
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.4.2-0jpp.ep1.5.el4
0:1.4.2-0jpp.ep1.5.el4
glassfish-jsf
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2_13-2.1.ep1.el4
0:1.2_13-2.1.ep1.el4
hibernate3
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11.GA_CP02.ep1.el4
0:3.3.1-1.11.GA_CP02.ep1.el4
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11.GA_CP02.ep1.el4
0:3.3.1-1.11.GA_CP02.ep1.el4
hibernate3-entitymanager
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.GA_CP01.ep1.el4
0:3.3.2-2.5.GA_CP01.ep1.el4
hibernate3-entitymanager-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.GA_CP01.ep1.el4
0:3.3.2-2.5.GA_CP01.ep1.el4
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
jacorb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.9.el4
0:2.3.0-1jpp.ep1.9.el4
jakarta-commons-logging-jboss
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.1-9.ep1.el4
0:1.1-9.ep1.el4
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.5.5-3.CP04.2.ep1.el4
0:1.5.5-3.CP04.2.ep1.el4
jboss-common
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-0jpp.ep1.3.el4
0:1.2.1-0jpp.ep1.3.el4
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.2.3-3.SP1.ep1.el4
0:2.2.3-3.SP1.ep1.el4
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.22.el4
0:1.2.1-1.ep1.22.el4
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.22.el4
0:1.2.1-1.ep1.22.el4
jbossas
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-5.GA_CP08.5.ep1.el4
0:4.2.0-5.GA_CP08.5.ep1.el4
jbossas-4.2.0.GA_CP08-bin
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-5.GA_CP08.5.ep1.el4
0:4.2.0-5.GA_CP08.5.ep1.el4
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-5.GA_CP08.5.ep1.el4
0:4.2.0-5.GA_CP08.5.ep1.el4
jbossts
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4
1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.0-6.CP12.0jpp.ep1.2.el4
0:2.0.0-6.CP12.0jpp.ep1.2.el4
jcommon
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.16-1.1.ep1.el4
0:1.0.16-1.1.ep1.el4
jfreechart
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.13-2.3.1.ep1.el4
0:1.0.13-2.3.1.ep1.el4
jgroups
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:2.4.7-1.ep1.el4
1:2.4.7-1.ep1.el4
quartz
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.5.2-1jpp.patch01.ep1.4.el4
0:1.5.2-1jpp.patch01.ep1.4.el4
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-6.GA_CP08.ep1.3.el4
0:4.2.0-6.GA_CP08.ep1.3.el4
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-6.GA_CP08.ep1.3.el4
0:4.2.0-6.GA_CP08.ep1.3.el4
xerces-j2
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.7.1-9jpp.4.patch_02.1.ep1.el4
0:2.7.1-9jpp.4.patch_02.1.ep1.el4
xml-security
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.3.0-1.3.patch01.ep1.2.el4
0:1.3.0-1.3.patch01.ep1.2.el4
glassfish-jaxb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.1.4-1.12.patch03.1.ep1.el5
0:2.1.4-1.12.patch03.1.ep1.el5
glassfish-jaxb-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.1.4-1.12.patch03.1.ep1.el5
0:2.1.4-1.12.patch03.1.ep1.el5
glassfish-jsf
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.2_13-2.1.ep1.el5
0:1.2_13-2.1.ep1.el5
hibernate3
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11GA_CP02.ep1.el5
0:3.3.1-1.11GA_CP02.ep1.el5
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11GA_CP02.ep1.el5
0:3.3.1-1.11GA_CP02.ep1.el5
hibernate3-entitymanager
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.1.ep1.el5
0:3.3.2-2.5.1.ep1.el5
hibernate3-entitymanager-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.1.ep1.el5
0:3.3.2-2.5.1.ep1.el5
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
jacorb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.9.1.el5
0:2.3.0-1jpp.ep1.9.1.el5
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.5.5-3.CP04.2.ep1.el5
0:1.5.5-3.CP04.2.ep1.el5
jboss-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-0jpp.ep1.3.el5.1
0:1.2.1-0jpp.ep1.3.el5.1
jboss-messaging
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.4.0-3.SP3_CP09.4.ep1.el5
0:1.4.0-3.SP3_CP09.4.ep1.el5
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.2.3-3.SP1.ep1.el5
0:2.2.3-3.SP1.ep1.el5
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1
jboss-seam2
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.2.FP-1.ep1.18.el5
0:2.0.2.FP-1.ep1.18.el5
jboss-seam2-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.2.FP-1.ep1.18.el5
0:2.0.2.FP-1.ep1.18.el5
jbossas
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.4.2.ep1.el5
0:4.3.0-6.GA_CP07.4.2.ep1.el5
jbossas-4.3.0.GA_CP07-bin
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.4.2.ep1.el5
0:4.3.0-6.GA_CP07.4.2.ep1.el5
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.4.2.ep1.el5
0:4.3.0-6.GA_CP07.4.2.ep1.el5
jbossts
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5
1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.0-6.CP12.0jpp.ep1.2.el5
0:2.0.0-6.CP12.0jpp.ep1.2.el5
jbossws
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.1-4.SP2_CP07.2.1.ep1.el5
0:2.0.1-4.SP2_CP07.2.1.ep1.el5
jbossws-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.0-2.GA_CP05.1.ep1.el5
0:1.0.0-2.GA_CP05.1.ep1.el5
jbossws-framework
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.1-1.GA_CP05.1.ep1.el5
0:2.0.1-1.GA_CP05.1.ep1.el5
jbossws-native42
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.1-4.SP2_CP07.2.1.ep1.el5
0:2.0.1-4.SP2_CP07.2.1.ep1.el5
jcommon
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.16-1.1.ep1.el5
0:1.0.16-1.1.ep1.el5
jfreechart
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.13-2.3.1.ep1.el5
0:1.0.13-2.3.1.ep1.el5
jgroups
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 1:2.4.7-1.ep1.el5
1:2.4.7-1.ep1.el5
quartz
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.5.2-1jpp.patch01.ep1.4.1.el5
0:1.5.2-1jpp.patch01.ep1.4.1.el5
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.ep1.3.el5
0:4.3.0-6.GA_CP07.ep1.3.el5
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.ep1.3.el5
0:4.3.0-6.GA_CP07.ep1.3.el5
xml-security
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.3.0-1.3.patch01.ep1.2.1.el5
0:1.3.0-1.3.patch01.ep1.2.1.el5
glassfish-jsf
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.2_13-2.1.ep1.el5
0:1.2_13-2.1.ep1.el5
hibernate3
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11GA_CP02.ep1.el5
0:3.3.1-1.11GA_CP02.ep1.el5
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11GA_CP02.ep1.el5
0:3.3.1-1.11GA_CP02.ep1.el5
hibernate3-entitymanager
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.1.ep1.el5
0:3.3.2-2.5.1.ep1.el5
hibernate3-entitymanager-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.1.ep1.el5
0:3.3.2-2.5.1.ep1.el5
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
jacorb
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.9.1.el5
0:2.3.0-1jpp.ep1.9.1.el5
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.5.5-3.CP04.2.ep1.el5
0:1.5.5-3.CP04.2.ep1.el5
jboss-common
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-0jpp.ep1.3.el5.1
0:1.2.1-0jpp.ep1.3.el5.1
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:2.2.3-3.SP1.ep1.el5
0:2.2.3-3.SP1.ep1.el5
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.14.el5
0:1.2.1-1.ep1.14.el5
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.14.el5
0:1.2.1-1.ep1.14.el5
jbossas
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-5.GA_CP08.5.2.ep1.el5
0:4.2.0-5.GA_CP08.5.2.ep1.el5
jbossas-4.2.0.GA_CP08-bin
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-5.GA_CP08.5.2.ep1.el5
0:4.2.0-5.GA_CP08.5.2.ep1.el5
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-5.GA_CP08.5.2.ep1.el5
0:4.2.0-5.GA_CP08.5.2.ep1.el5
jbossts
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5
1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.0-6.CP12.0jpp.ep1.2.el5
0:2.0.0-6.CP12.0jpp.ep1.2.el5
jcommon
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.16-1.1.ep1.el5
0:1.0.16-1.1.ep1.el5
jfreechart
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.13-2.3.1.ep1.el5
0:1.0.13-2.3.1.ep1.el5
jgroups
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 1:2.4.7-1.ep1.el5
1:2.4.7-1.ep1.el5
quartz
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.5.2-1jpp.patch01.ep1.4.1.el5
0:1.5.2-1jpp.patch01.ep1.4.1.el5
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-6.GA_CP08.ep1.3.el5
0:4.2.0-6.GA_CP08.ep1.3.el5
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-6.GA_CP08.ep1.3.el5
0:4.2.0-6.GA_CP08.ep1.3.el5
xml-security
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.3.0-1.3.patch01.ep1.2.1.el5
0:1.3.0-1.3.patch01.ep1.2.1.el5

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-2405 is a medium vulnerability (CVSS 4.3) in Redhat Jboss Enterprise Application Platform, published December 15, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.53%, the 85th percentile. No source names a fixed version.

References

Show 43 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open