CVE-2009-5092: Cross-site scripting (XSS) vulnerability in the management interface in Microsoft FAST ESP 5.1.5 and earlie...

Security readout for executives and security teams

CVE-2009-5092 is an old cross-site scripting issue in the Microsoft FAST ESP management interface, affecting version 5.1.5 and earlier per the CVE description. A remote attacker could inject script or HTML through unspecified vectors. The source bundle does not provide a CVSS score, patch detail, or confirmed exploitation evidence. Exposure is most likely in legacy Microsoft FAST ESP 5.1.5 or earlier deployments with the management interface reachable by users or networks beyond a tightly controlled admin segment. Treat as a legacy exposure review item, not an emergency, unless FAST ESP is still deployed and its management interface is broadly reachable. Mitigation focus: Inventory Microsoft FAST ESP deployments and identify versions 5.1.5 or earlier.; Restrict management interface access to trusted administrator networks only.; Check Microsoft and linked advisories for supported fix or mitigation guidance..

Prepared

Jun 27, 2026, 18:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.