Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: this can be leveraged for access to the SunMC Web Console.

Sun Management Centre 3.6.1 PRM: Patch for Solaris 10.
Date this patch was last updated by Sun : Feb/27/09

Sun Management Centre 3.6.1 PRM: Patch for Solaris 10.
Date this patch was last updated by Sun : Feb/27/09

This plugin has been deprecated and either replaced with individual 125194 patch-revision plugins, or deemed non-security related.

Sun Management Center 4.0: PRM Patch for Solaris 10_x86.
Date this patch was last updated by Sun : Mar/14/12

This plugin has been deprecated and either replaced with individual 138554 patch-revision plugins, or deemed non-security related.

Sun Management Centre 3.6.1 PRM: Patch for Solaris 8.
Date this patch was last updated by Sun : Feb/27/09

Sun Management Centre 3.6.1 PRM: Patch for Solaris 9.
Date this patch was last updated by Sun : Feb/27/09

Sun Management Center 4.0: PRM Patch for Solaris 10.
Date this patch was last updated by Sun : Mar/14/12

This plugin has been deprecated and either replaced with individual 138553 patch-revision plugins, or deemed non-security related.

ID	Name	Product	Family	Severity
107419	Solaris 10 (sparc) : 125194-04	Nessus	Solaris Local Security Checks	medium
37997	Solaris 10 (sparc) : 125194-04 (deprecated)	Nessus	Solaris Local Security Checks	medium
37639	Solaris 10 (x86) : 138554-12 (deprecated)	Nessus	Solaris Local Security Checks	high
37397	Solaris 8 (sparc) : 125191-04	Nessus	Solaris Local Security Checks	medium
36484	Solaris 9 (sparc) : 125192-04	Nessus	Solaris Local Security Checks	medium
36396	Solaris 10 (sparc) : 138553-12 (deprecated)	Nessus	Solaris Local Security Checks	high

Detections

Analytics

CVE-2009-0857

medium

Tenable Plugins

medium

medium

high

medium

medium

high