{"schemaVersion":3,"id":"CVE-2009-1432","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) before 11.0 MR2, allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled.","dates":{"published":"2009-04-30T20:00:00.000Z","modified":"2024-08-07T05:13:25.548Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04225,"percentile":0.90884,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.04225},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04225,"percentile":0.90884}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04225,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04225,"percentile":0.90884}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"symantec","product":"antivirus","name":"antivirus","label":"antivirus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"10.1","noFixRecorded":false,"fixedIn":null},{"text":"10.1:maintenance_release7","noFixRecorded":false,"fixedIn":null},{"text":"10.2","noFixRecorded":false,"fixedIn":null},{"text":"10.2:maintenance_release1","noFixRecorded":false,"fixedIn":null}],"versionsText":"10.1 | 10.1:maintenance_release7 | 10.2 | 10.2:maintenance_release1","eol":null,"hubHref":"/vendor/symantec/antivirus"},{"vendor":"symantec","product":"client_security","name":"client security","label":"client_security","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.1","noFixRecorded":false,"fixedIn":null},{"text":"3.1:maintenance_release7","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.1 | 3.1:maintenance_release7","eol":null,"hubHref":"/vendor/symantec/client_security"},{"vendor":"symantec","product":"endpoint_protection","name":"endpoint protection","label":"endpoint_protection","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"11.0","noFixRecorded":false,"fixedIn":null},{"text":"11.0:maintenance_release1","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.0 | 11.0:maintenance_release1","eol":null,"hubHref":"/vendor/symantec/endpoint_protection"}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.vupen.com/english/advisories/2009/1204","label":"www.vupen.com/english/advisories/2009/1204","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1022137","label":"securitytracker.com/id?1022137","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34856","label":"secunia.com/advisories/34856","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://securitytracker.com/id?1022138","label":"securitytracker.com/id?1022138","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34935","label":"secunia.com/advisories/34935","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://securitytracker.com/id?1022136","label":"securitytracker.com/id?1022136","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_00","label":"www.symantec.com/security_response/…","hostname":"www.symantec.com","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1202","label":"www.vupen.com/english/advisories/2009/1202","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50172","label":"exchange.xforce.ibmcloud.com/vulnerabilities/50172","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34668","label":"www.securityfocus.com/bid/34668","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2009-04-30T20:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T05:13:25.548Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:24:51.288Z","stale":false,"partial":false}}