[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fz3sFDm8wGVoyzTlViDP2T4AAERA0OoWPsK6MOcPitjw":3,"g5a-risk:CVE-2009-3843":123},{"success":4,"data":5,"meta":121},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":28,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":41,"references":42,"referencesCount":80,"weaknesses":81,"weaknessesCount":41,"isActivelyExploited":30,"cisaInfo":28,"otxData":28,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":119,"notableEvents":120},"CVE-2009-3843","What is CVE-2009-3843?","HP Operations Manager 8.10 on Windows contains a \"hidden account\" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager\u002Fhtml\u002Fupload.","HP Operations Manager 8.10 on Windows contains a \"hidden account\" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unres...","2009-11-24T00:30:00.42","2026-06-16T23:12:27.627",10,"AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":31},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":12,"ImpactScore":12,"ACInsufInfo":30,"ObtainAllPrivilege":30,"ObtainUserPrivilege":30,"ObtainOtherPrivilege":30,"UserInteractionRequired":30},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","COMPLETE","",null,"HIGH",false,[],0.78968,[32,32,32,32,32,32,32],"Critical",[36],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"hp","operations_manager","8.10","cpe:2.3:a:hp:operations_manager:8.10:*:windows:*:*:*:*:*",1,[43,47,52,56,60,64,68,70,72,74,76,78],{"url":44,"source":45,"tags":46},"http:\u002F\u002Fmarc.info\u002F?l=bugtraq&m=125873415424980&w=2","Marc",[],{"url":48,"source":49,"tags":50},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F37444","Secunia",[51],"Vendor Advisory",{"url":53,"source":54,"tags":55},"http:\u002F\u002Fsecuritytracker.com\u002Fid?1023222","Securitytracker",[],{"url":57,"source":58,"tags":59},"http:\u002F\u002Fwww.osvdb.org\u002F60317","Osvdb",[],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-09-085\u002F","Zerodayinitiative",[],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F54361","Ibmcloud",[],{"url":44,"source":45,"tags":69},[],{"url":48,"source":49,"tags":71},[51],{"url":53,"source":54,"tags":73},[],{"url":57,"source":58,"tags":75},[],{"url":61,"source":62,"tags":77},[],{"url":65,"source":66,"tags":79},[],12,[82],{"id":83,"name":83,"description":84},"Unknown","CWE-264",[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2009-3843? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-3843, a critical severity cyber security vulnerability from 2009. High exploit probability (79.0%). HP Operations Manager ...","CVE-2009-3843, CVE-2009-3843 vulnerability, CVE-2009-3843 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, hp security, operations_manager vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2009-3843",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-3843","Cybersecurity","CVE-2009-3843, CVE-2009-3843 vulnerability, CVE-2009-3843 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112],{"Operator":28,"Negate":28,"Nodes":113},[114],{"Operator":115,"Negate":30,"CPEMatch":116},"OR",[117],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":118,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"94949E33-6ED5-4E91-ABBD-353285AC3EF9",[],[],{"lastModified":11,"cacheTime":122,"version":22},1792358882625,{"score":124,"band":125,"action":126,"scoredAt":127},67,"Medium","Plan remediation","2026-10-17T06:36:58.734498+00:00"]