CVE-2009-1729

MEDIUM 4.3CVE-2009-1729 · Published 21/05/2009 · updated 16/06/2026

In short

CVE-2009-1729 is a MEDIUM (CVSS 4.3) vulnerability affecting java system communications express (sun).
Chance of exploitation in the next 30 days (EPSS): 5.3%, higher than 92.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
java system communications express sun	`= 6.2= 6.3`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the abperson_displayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Address Book component or (2) the temporaryCalendars parameter to uwc/base/UWCMain.

References

More vulnerabilities in java system communications express

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free