CVE-2009-0809

LOW 3.5CVE-2009-0809 · Published 04/03/2009 · updated 16/06/2026

In short

CVE-2009-0809 is a LOW (CVSS 3.5) vulnerability affecting enovia smarteam (3ds), catia (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.86%, higher than 58.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
enovia smarteam 3ds	`≤ 5.18`	No fix yet
catia ibm	`= 5.16= 5.17≤ 5.18`	No fix yet

Description

The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object.

References

secunia.com/advisories/34037 · Vendor Advisory
www-01.ibm.com/support/docview.wss · Vendor Advisory
securityfocus.com/bid/33895
vupen.com/english/advisories/2009/0525 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free