Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-1772
HistoryMay 13, 2011 - 5:05 p.m.

CVE-2011-1772

2011-05-1317:05:00
CWE-79
[email protected]
web.nvd.nist.gov
41
cve-2011-1772
xss
apache
struts 2.x
security vulnerability
cross-site scripting
nvd

8 High

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the action attribute of an s:submit element, or (3) the method attribute of an s:submit element.

Related

prion 2
seebug 1
osv 2
checkpoint_advisories 1
packetstorm 1
jvn 1
github 2
cvelist 2
nessus 1
securityvulns 2
openvas 2
cve 1
ibm 3
prion
prion
Cross site scripting
2011-05-13 17:05:00
Security feature bypass
2011-05-13 17:05:00
seebug
seebug
Apache Struts XWork 's:submit' HTMLζ ‡η­Ύθ·¨η«™θ„šζœ¬ζΌζ΄ž
2011-05-12 00:00:00
osv
osv
Cross-site Scripting in Apache Struts
2022-05-17 05:35:28
XWork in Apache Struts Reveals Sensitive Information
2022-05-14 02:55:17
checkpoint_advisories
checkpoint_advisories
Apache Struts XWork Error Page Multiple Cross-Site Scripting (CVE-2011-1772)
2013-10-13 00:00:00
packetstorm
packetstorm
Apache Struts 2 Cross Site Scripting
2011-05-11 00:00:00
jvn
jvn
JVN#25435092: Apache Struts vulnerable to cross-site scripting
2011-12-22 00:00:00
github
github
Cross-site Scripting in Apache Struts
2022-05-17 05:35:28
XWork in Apache Struts Reveals Sensitive Information
2022-05-14 02:55:17
cvelist
cvelist
CVE-2011-1772
2011-05-13 17:00:00
CVE-2011-2088
2011-05-13 17:00:00
nessus
nessus
Apache Struts 2.x < 2.2.3 Multiple XSS (S2-006)
2018-09-10 00:00:00
securityvulns
securityvulns
Apache Struts 2 Multiple Reflected XSS in XWork error pages
2011-05-11 00:00:00
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2011-05-11 00:00:00
openvas
openvas
Apache Struts Security Update (S2-006) - Version Check
2021-09-14 00:00:00
Apache Struts Security Update (S2-006) - Active Check
2011-05-23 00:00:00
cve
cve
CVE-2011-2088
2011-05-13 17:05:00
ibm
ibm
Security Bulletin: Order Management could be subject to multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x.
2024-04-12 17:35:43
Security Bulletin: IBM Sterling Order Management Apache Struts upgrade strategy (various CVEs, see below)
2022-09-14 17:45:15
Security Bulletin: IBM Call Center and Apache Struts Struts upgrade strategy (various CVEs, see below)
2022-09-14 17:37:56

8 High

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.4%

JSON
Related for CVE-2011-1772
prion2seebug1osv2checkpoint_advisories1packetstorm1jvn1github2cvelist2nessus1securityvulns2openvas2cve1ibm3