Lucene search

[email protected]CVE-2011-1992

HistoryDec 14, 2011 - 12:55 a.m.

CVE-2011-1992

2011-12-1400:55:01

CWE-79

[email protected]

web.nvd.nist.gov

cve-2011-1992

xss filter

internet explorer 8

remote attackers

information disclosure

vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.096 Low

EPSS

Percentile

94.8%

JSON

The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to read content from a different (1) domain or (2) zone via a “trial and error” attack, aka “XSS Filter Information Disclosure Vulnerability.”

Affected configurations

NVD

Node

microsoftinternet_explorerMatch8

AND

microsoftwindows_7Match-

microsoftwindows_7Match-sp1

microsoftwindows_server_2003Match-sp2

microsoftwindows_server_2008Match--

microsoftwindows_server_2008Match-sp2

microsoftwindows_server_2008Matchr2

microsoftwindows_vistaMatch-sp1

microsoftwindows_vistaMatch-sp2

microsoftwindows_xpMatch-sp2professionalx64

microsoftwindows_xpMatch-sp3

CPENameOperatorVersion
microsoft:internet_explorermicrosoft internet explorereq8

CPE	Name	Operator	Version
microsoft:internet_explorer	microsoft internet explorer	eq	8

References

www.us-cert.gov/cas/techalerts/TA11-347A.html

docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-099

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14745

Social References

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.096 Low

EPSS

Percentile

94.8%

JSON

Related for CVE-2011-1992

nvd1 prion1 checkpoint_advisories1 cvelist1 openvas2 securityvulns1 mskb1 nessus1