← Vulnerability feed

Vulnerability record · CVE-2009-3731 · published 16 December 2009

CVE-2009-3731: Webworks epublisher cross-site scripting vulnerability

Webworks · Epublisher

Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x; VMware vCenter Lab Manager 3.x and 4.x before 4.0.1; VMware Stage Manager 1.x before 4.0.1; WebWorks Publisher 6.x through 8.x; WebWorks Publisher 2003; and WebWorks ePublisher 9.0.x through 9.3, 2008.1 through 2008.4, and 2009.x before 2009.3 allow remote attackers to inject arbitrary web script or HTML via (1) wwhelp_entry.html, reachable through index.html and wwhsec.htm, (2) wwhelp/wwhimpl/api.htm, (3) wwhelp/wwhimpl/common/html/frameset.htm, (4) wwhelp/wwhimpl/common/scripts/switch.js, or (5) the window.opener component in wwhelp/wwhimpl/common/html/bookmark.htm, related to (a) unspecified parameters and (b) messages used in topic links for the bookmarking functionality.

4.3 CVSS 2.0 Medium EPSS 2.8% · top 14.2% CWE-79 · Cross-site scripting
4.3CVSS 2.0 base score
2.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
10Affected product versions listed by NVD
28References
16 Jun 2026Last modified by NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x; VMware vCenter Lab Manager 3.x and 4.x before 4.0.1; VMware Stage Manager 1.x before 4.0.1; WebWorks Publisher 6.x through 8.x; WebWorks Publisher 2003; and WebWorks ePublisher 9.0.x through 9.3, 2008.1 through 2008.4, and 2009.x before 2009.3 allow remote attackers to inject arbitrary web script or HTML via (1) wwhelp_entry.html, reachable through index.html and wwhsec.htm, (2) wwhelp/wwhimpl/api.htm, (3) wwhelp/wwhimpl/common/html/frameset.htm, (4) wwhelp/wwhimpl/common/scripts/switch.js, or (5) the window.opener component in wwhelp/wwhimpl/common/html/bookmark.htm, related to (a) unspecified parameters and (b) messages used in topic links for the bookmarking functionality.

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

10 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/bugtraq/2009-12/0229.html
http://lists.vmware.com/pipermail/security-announce/2009/000073.html Vendor Advisory
http://secunia.com/advisories/38749
http://secunia.com/advisories/38842
http://securitytracker.com/id?1023683
http://www.osvdb.org/62738
http://www.osvdb.org/62739
http://www.osvdb.org/62740
http://www.osvdb.org/62741
http://www.osvdb.org/62742
http://www.securityfocus.com/archive/1/509883/100/0/threaded
http://www.securityfocus.com/bid/37346 Patch
http://www.webworks.com/Security/2009-0001/ PatchVendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5944
http://archives.neohapsis.com/archives/bugtraq/2009-12/0229.html
http://lists.vmware.com/pipermail/security-announce/2009/000073.html Vendor Advisory
http://secunia.com/advisories/38749
http://secunia.com/advisories/38842
http://securitytracker.com/id?1023683
http://www.osvdb.org/62738
http://www.osvdb.org/62739
http://www.osvdb.org/62740
http://www.osvdb.org/62741
http://www.osvdb.org/62742
http://www.securityfocus.com/archive/1/509883/100/0/threaded
http://www.securityfocus.com/bid/37346 Patch
http://www.webworks.com/Security/2009-0001/ PatchVendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5944

Track CVE-2009-3731 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-3732Vmware ace vulnerabilityFormat string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via…EPSS 16%10.0CVE-2008-3691Vmware ace vulnerabilityUnspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 b…EPSS 3.9%10.0CVE-2008-3692Vmware ace vulnerabilityUnspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 b…EPSS 3.6%10.0CVE-2008-3693Vmware ace vulnerabilityUnspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 b…EPSS 3.6%10.0CVE-2008-3694Vmware ace vulnerabilityUnspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 b…EPSS 3.6%10.0CVE-2008-3695Vmware ace vulnerabilityUnspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 b…EPSS 3.6%10.0CVE-2008-3696Vmware ace vulnerabilityUnspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 b…EPSS 3.6%10.0CVE-2008-3892Vmware ace memory buffer overflow vulnerabilityBuffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.…EPSS 24%

Source: NIST National Vulnerability Database (record CVE-2009-3731), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.