CVE-2011-4264
Published Dec 8, 2011
Last updated 13 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in Etomite before 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Source
- vultures@jpcert.or.jp
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:etomite:etomite:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3246544-1247-4081-897A-2A840189016C",
"versionEndIncluding": "1.0"
},
{
"criteria": "cpe:2.3:a:etomite:etomite:0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3C5AD0F-8476-42EB-B78C-A4E01DC96E73"
},
{
"criteria": "cpe:2.3:a:etomite:etomite:0.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D20793F3-8FE8-4116-911E-D2F7D9CC22BF"
},
{
"criteria": "cpe:2.3:a:etomite:etomite:0.6.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0460C370-0F14-4A71-9618-77F0ACC909BD"
},
{
"criteria": "cpe:2.3:a:etomite:etomite:0.6.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E547A925-A065-4453-B550-1FF960B70129"
},
{
"criteria": "cpe:2.3:a:etomite:etomite:0.6.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C06117EE-E743-4E2C-8344-DE098DF0FDF8"
},
{
"criteria": "cpe:2.3:a:etomite:etomite:0.6.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9920A50-2D21-4A08-B9BB-73BFF2D2E3A6"
}
],
"operator": "OR"
}
]
}
]