CVE-2009-2705

MEDIUM · CVSS 4.3 EPSS 4.36%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-08-11 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-2705

Severity

MEDIUM

CVSS

4.3

EPSS

4.36%

Original NVD Description

CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters.