CVE-2009-4843: Toutvirtual Virtualiq

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to (1) the JMX Management Console or (2) the Web Console.

Affected products

• Toutvirtual Virtualiq: version 3.5 only

Published 2010-05-07. Last modified 2026-06-16.