{"api_version":"1","generated_at":"2026-07-23T10:47:36+00:00","cve":"CVE-2009-4608","urls":{"html":"https://cve.report/CVE-2009-4608","api":"https://cve.report/api/cve/CVE-2009-4608.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-4608","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-4608"},"summary":{"title":"CVE-2009-4608","description":"Cross-site scripting (XSS) vulnerability in Canon IT Solutions Inc. ACCESSGUARDIAN 3.0.14 and earlier, and 3.5.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to authentication.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-01-13 11:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/2973","name":"http://www.vupen.com/english/advisories/2009/2973","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/59058","name":"http://osvdb.org/59058","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://canon-its.jp/guardian/topics/200910ag.html","name":"http://canon-its.jp/guardian/topics/200910ag.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Mail・Webの総合情報漏えい対策ソリューション GUARDIANWALLシリーズ｜キヤノン","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvn.jp/en/jp/JVN33822756/index.html","name":"http://jvn.jp/en/jp/JVN33822756/index.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"JVN#33822756 Canon IT Solutions Inc. ACCESSGUARDIAN vulnerable to cross-site scripting","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53822","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53822","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000066.html","name":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000066.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"JVNDB-2009-000066 - JVN iPedia","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/37045","name":"http://secunia.com/advisories/37045","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"ACCESSGUARDIAN Unspecified Cross-Site Scripting Vulnerability - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-4608","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4608","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"4608","vulnerable":"1","versionEndIncluding":"3.0.14","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"canon-its","cpe5":"accessguardian","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4608","vulnerable":"1","versionEndIncluding":"3.5.6","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"canon-its","cpe5":"accessguardian","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T07:08:37.922Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"JVNDB-2009-000066","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"],"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000066.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://canon-its.jp/guardian/topics/200910ag.html"},{"name":"accessguardian-unspecified-xss(53822)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53822"},{"name":"59058","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/59058"},{"name":"ADV-2009-2973","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/2973"},{"name":"JVN#33822756","tags":["third-party-advisory","x_refsource_JVN","x_transferred"],"url":"http://jvn.jp/en/jp/JVN33822756/index.html"},{"name":"37045","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/37045"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-10-20T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Canon IT Solutions Inc. ACCESSGUARDIAN 3.0.14 and earlier, and 3.5.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to authentication."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"JVNDB-2009-000066","tags":["third-party-advisory","x_refsource_JVNDB"],"url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000066.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://canon-its.jp/guardian/topics/200910ag.html"},{"name":"accessguardian-unspecified-xss(53822)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53822"},{"name":"59058","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/59058"},{"name":"ADV-2009-2973","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/2973"},{"name":"JVN#33822756","tags":["third-party-advisory","x_refsource_JVN"],"url":"http://jvn.jp/en/jp/JVN33822756/index.html"},{"name":"37045","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/37045"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-4608","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in Canon IT Solutions Inc. ACCESSGUARDIAN 3.0.14 and earlier, and 3.5.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to authentication."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"JVNDB-2009-000066","refsource":"JVNDB","url":"http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000066.html"},{"name":"http://canon-its.jp/guardian/topics/200910ag.html","refsource":"CONFIRM","url":"http://canon-its.jp/guardian/topics/200910ag.html"},{"name":"accessguardian-unspecified-xss(53822)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53822"},{"name":"59058","refsource":"OSVDB","url":"http://osvdb.org/59058"},{"name":"ADV-2009-2973","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/2973"},{"name":"JVN#33822756","refsource":"JVN","url":"http://jvn.jp/en/jp/JVN33822756/index.html"},{"name":"37045","refsource":"SECUNIA","url":"http://secunia.com/advisories/37045"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-4608","datePublished":"2010-01-13T11:00:00.000Z","dateReserved":"2010-01-12T00:00:00.000Z","dateUpdated":"2024-08-07T07:08:37.922Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-01-13 11:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:canon-its:accessguardian:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndIncluding":"3.0.14","matchCriteriaId":"7CA66DE4-679A-4120-B7D1-6937799FA87E"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon-its:accessguardian:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5","versionEndIncluding":"3.5.6","matchCriteriaId":"C1BC40D5-CC39-49BA-B064-4B3410890D1B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"4608","Ordinal":"1","Title":"CVE-2009-4608","CVE":"CVE-2009-4608","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"4608","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in Canon IT Solutions Inc. ACCESSGUARDIAN 3.0.14 and earlier, and 3.5.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to authentication.","Type":"Description","Title":"CVE-2009-4608"},{"CveYear":"2009","CveId":"4608","Ordinal":"2","NoteData":"2010-01-13","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"4608","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}