Lucene search
MicrosoftCVE-2011-1264HistoryJun 16, 2011 - 8:55 p.m.
CVE-2011-1264
2011-06-1620:55:01
CWE-79
microsoft
web.nvd.nist.gov
32
cve-2011-1264
cross-site scripting
xss
active directory certificate services
microsoft windows server
vulnerability
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.004
Percentile
72.7%
Cross-site scripting (XSS) vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka “Active Directory Certificate Services Vulnerability.”
Affected configurations
Node
microsoftwindows_2003_serversp2
ORmicrosoftwindows_server_2003sp2
ORmicrosoftwindows_server_2008x32
ORmicrosoftwindows_server_2008x64
ORmicrosoftwindows_server_2008sp2x32
ORmicrosoftwindows_server_2008sp2x64
ORmicrosoftwindows_server_2008Matchr2x64
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_2003_server | * | cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:* |
| microsoft | windows_server_2003 | * | cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:* |
| microsoft | windows_server_2008 | r2 | cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:* |
Related
nessus
nessus
cvelist
cvelist
CVE-2011-1264
2011-06-16 20:21:00
openvas
openvas
checkpoint_advisories
checkpoint_advisories
securityvulns
securityvulns
Microsoft Certificate Services crossite scripting
2011-06-15 00:00:00
prion
prion
Cross site scripting
2011-06-16 20:55:00
nvd
nvd
CVE-2011-1264
2011-06-16 20:55:01
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.004
Percentile
72.7%
Related for CVE-2011-1264