5.8
CVE-2009-4071
- EPSS 0.76%
- Published 24.11.2009 17:30:00
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via unspecified vectors.
Data is provided by the National Vulnerability Database (NVD)
Opera ≫ Opera Browser Updatebeta_1 Version <= 10.10
Opera ≫ Opera Browser Version7.0
Opera ≫ Opera Browser Version7.23
Opera ≫ Opera Browser Version7.53
Opera ≫ Opera Browser Version7.54
Opera ≫ Opera Browser Version7.60
Opera ≫ Opera Browser Version8.0
Opera ≫ Opera Browser Version8.01
Opera ≫ Opera Browser Version8.02
Opera ≫ Opera Browser Version8.50
Opera ≫ Opera Browser Version8.51
Opera ≫ Opera Browser Version8.52
Opera ≫ Opera Browser Version8.53
Opera ≫ Opera Browser Version8.54
Opera ≫ Opera Browser Version9.0
Opera ≫ Opera Browser Version9.01
Opera ≫ Opera Browser Version9.02
Opera ≫ Opera Browser Version9.10
Opera ≫ Opera Browser Version9.12
Opera ≫ Opera Browser Version9.20
Opera ≫ Opera Browser Version9.21
Opera ≫ Opera Browser Version9.22
Opera ≫ Opera Browser Version9.51
Opera ≫ Opera Browser Version9.52
Opera ≫ Opera Browser Version9.64
Opera ≫ Opera Browser Version10
Opera ≫ Opera Browser Version10.00
Opera ≫ Opera Browser Version10.00 Updatebeta_3
Opera ≫ Opera Browser Version10.01
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Type | Source | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.76% | 0.709 |
Source | Base Score | Exploit Score | Impact Score | Vector string |
---|---|---|---|---|
nvd@nist.gov | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:P/A:N
|