CVE-2009-3565

Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager (NSM) before 5.1.11.6 allow remote attackers to inject arbitrary web script or HTML via the (1) iaction or (2) node parameter.

• CWE-79

• http://kc.mcafee.com/corporate/index?page=content&id=SB10004Vendor Advisory
• http://secunia.com/advisories/37178Vendor Advisory
• http://securitytracker.com/id?1023171
• http://www.osvdb.org/59911
• http://www.secureworks.com/ctu/advisories/SWRX-2009-001
• http://www.securityfocus.com/archive/1/507820/100/0/threaded
• http://www.securityfocus.com/bid/37003Exploit
• http://www.vupen.com/english/advisories/2009/3226Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54250
• http://kc.mcafee.com/corporate/index?page=content&id=SB10004Vendor Advisory
• http://secunia.com/advisories/37178Vendor Advisory
• http://securitytracker.com/id?1023171
• http://www.osvdb.org/59911
• http://www.secureworks.com/ctu/advisories/SWRX-2009-001
• http://www.securityfocus.com/archive/1/507820/100/0/threaded
• http://www.securityfocus.com/bid/37003Exploit
• http://www.vupen.com/english/advisories/2009/3226Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54250

Published

Nov 13, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-3559main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does …
• CVE-2009-3560The big2_toUtf8 function in lib/xmltok.c in libexpat in Expa…
• CVE-2009-3561Directory traversal vulnerability in Xerver HTTP Server 4.32…
• CVE-2009-3562Cross-site scripting (XSS) vulnerability in Xerver HTTP Serv…
• CVE-2009-3563ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allo…
• CVE-2009-3564puppetmasterd in puppet 0.24.6 does not reset supplementary …
• CVE-2009-3566McAfee IntruShield Network Security Manager (NSM) before 5.1…
• CVE-2009-3567Cross-site scripting (XSS) vulnerability in modules/tickets/…
• CVE-2009-3568Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a mod…
• CVE-2009-3569Stack-based buffer overflow in OpenOffice.org (OOo) allows r…
• CVE-2009-3570Unspecified vulnerability in OpenOffice.org (OOo) has unspec…
• CVE-2009-3571Unspecified vulnerability in OpenOffice.org (OOo) has unknow…