CVE-2011-1716

Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:xymon:xymon:*:beta3:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:*:beta4:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:*:beta5:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:*:beta6:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:*:rc1:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:*:rc2:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:*:rc3:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:*:rc4:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:*:rc5:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:*:rc6:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:*:*:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.0:*:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.0.4:*:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.1.1:*:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.1.2:*:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.1.2:p1:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.1.2:p2:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.2.0:*:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.2.2:*:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.2.3:*:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.3.0:beta1:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.3.0:beta2:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.3.0:beta3:*:*:*:*:*:*
cpe:2.3:a:xymon:xymon:4.3.0:rc1:*:*:*:*:*:*

History

21 Nov 2024, 01:26

Type Values Removed Values Added
References () http://osvdb.org/71489 - () http://osvdb.org/71489 -
References () http://secunia.com/advisories/44036 - Vendor Advisory () http://secunia.com/advisories/44036 - Vendor Advisory
References () http://securityreason.com/securityalert/8209 - () http://securityreason.com/securityalert/8209 -
References () http://www.securityfocus.com/archive/1/517316/100/0/threaded - () http://www.securityfocus.com/archive/1/517316/100/0/threaded -
References () http://www.securityfocus.com/archive/1/517325/100/0/threaded - () http://www.securityfocus.com/archive/1/517325/100/0/threaded -
References () http://www.securityfocus.com/bid/47156 - () http://www.securityfocus.com/bid/47156 -
References () http://xymon.svn.sourceforge.net/viewvc/xymon/branches/4.3.2/Changes?revision=6673&view=markup - () http://xymon.svn.sourceforge.net/viewvc/xymon/branches/4.3.2/Changes?revision=6673&view=markup -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/66542 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/66542 -

Information

Published : 2011-04-18 18:55

Updated : 2024-11-21 01:26


NVD link : CVE-2011-1716

Mitre link : CVE-2011-1716

CVE.ORG link : CVE-2011-1716


JSON object : View

Products Affected

xymon

  • xymon
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')