HP Palm Pre Webos vulnerabilities

3 CVEs affecting HP Palm Pre Webos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-5098, published 2011-09-13.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-5098, published 2011-09-13. Medium severity, CVSS 5.4. EPSS: 3.9% chance of exploitation in the next 30 days. The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service (crash) via a web page containing a long…
• CVE-2009-5071, published 2011-04-19. High severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."
• CVE-2009-5097, published 2011-09-13. High severity, CVSS 7.1. EPSS: 1.9% chance of exploitation in the next 30 days. Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.