CVE-2009-3030

no score yetEPSS 1.3%

symantec securityexpressions audit and compliance server: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an error message in a response, related to an "HTML Injection issue."

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2009-10-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

symantec:securityexpressions_audit_and_compliance_server

References

http://secunia.com/advisories/36972
http://securitytracker.com/id?1022989
http://www.osvdb.org/58650
http://www.securityfocus.com/bid/36571
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00

Check your stack JSON