CVE-2009-1288
- EPSS 4.85%
- Published 13.04.2009 16:30:00
- Last modified 09.04.2025 00:30:58
Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via (1) the username in a l...
- EPSS 0.21%
- Published 13.04.2009 16:30:00
- Last modified 09.04.2025 00:30:58
private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles and scopes of arbitrary user accounts via a modified WEBINDEX paramete...
CVE-2009-1290
- EPSS 0.46%
- Published 13.04.2009 16:30:00
- Last modified 09.04.2025 00:30:58
Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to hijack the authentic...