CVE-2009-1055

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.15%

Published

Mar 24, 2009

Modified

Apr 22, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests.

Affected Products (2)

sitecore · cmsvulnerable

References (12)

http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx

http://secunia.com/advisories/34356

Vendor Advisory

http://www.securityfocus.com/archive/1/501929/100/0/threaded

http://www.securityfocus.com/bid/34162

http://www.vupen.com/english/advisories/2009/0753

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/49298

http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx