CVE-2009-4999
IBM Filenet P8 Application Engine - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-016 allows remote attackers to inject arbitrary web script or HTML via the Name field.
Scores
EPSS
0.0020
EPSS Percentile
42.1%
Classification
CWE
CWE-79
Status
published
Affected Products (17)
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
ibm/filenet_p8_application_engine
... and 2 more
Timeline
Published
Sep 20, 2010
Tracked Since
Feb 18, 2026