CVE-2009-3745
Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise...
Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inject arbitrary web script or HTML via the query string.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inject arbitrary web script or HTML via the query string.
- Record
CVE-2009-3745- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inject arbitrary web script or HTML via the query string.
- Record
CVE-2009-3745- Updated
- 2026-11-02
EUVDEUVD-2009-3717 No score
Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inject arbitrary web script or HTML via the query string.
- Record
EUVD-2009-3717- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cv7m-77hj-cr43 No score
Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise...
Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inject arbitrary web script or HTML via the query string.
- Record
GHSA-cv7m-77hj-cr43- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3745 is a medium vulnerability (CVSS 4.3) in Ibm Rational Appscan, published October 22, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.29%, the 70th percentile. No source names a fixed version.
References
secunia.com/advisories/37093
vupen.com/english/advisories/2009/2974
www-01.ibm.com/support/docview.wss?uid=swg24024704
exchange.xforce.ibmcloud.com/vulnerabilities/53821
securityfocus.com/bid/36734
nvd.nist.gov/vuln/detail/CVE-2009-3745
github.com/advisories/GHSA-cv7m-77hj-cr43