vulnwire
3.5low

CVE-2009-0809

The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remo…

Published 17 y ago · modified 4 mo ago · JSON

CVSS
3.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.9%
percentile 59%
Public exploits
0
none known

The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object.

Exploit prediction (EPSS)

0.86% probability of exploitation in the next 30 days, higher than 59% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.03.5AV:N/AC:M/Au:S/C:P/I:N/A:N

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls

References

  • secunia.com /advisories/34037 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2009/0525 · vdb-entry, x_refsource_VUPEN, x_transferred
  • www-01.ibm.com /support/docview.wss?uid=swg1HD80332 · vendor-advisory, x_refsource_AIXAPAR, x_transferred
  • securityfocus.com /bid/33895 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.