CVE-2009-3440

Alienvault Ossim < 2.1 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the option parameter to the default URI (aka the main menu).

Exploits (1)

exploitdb WRITEUP VERIFIED
by Alexey Sintsov · textwebappsphp
https://www.exploit-db.com/exploits/9828

References (4)

Scores

EPSS 0.0096
EPSS Percentile 76.2%

Classification

CWE
CWE-79
Status published

Affected Products (4)

alienvault/ossim < 2.1
alienvault/ossim
alienvault/ossim
n/a/n/a

Timeline

Published Sep 28, 2009
Tracked Since Feb 18, 2026