Lucene search
HistoryMay 26, 2011 - 4:55 p.m.
CVE-2011-2172
ibm
websphere portal
xss
vulnerability
cve-2011-2172
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
66.1%
Cross-site scripting (XSS) vulnerability in the search center in IBM WebSphere Portal 7.0.0.1 before CF004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
ibmwebsphere_portalMatch7.0.0.1
ORibmwebsphere_portalMatch7.0.0.1cf002
ORibmwebsphere_portalMatch7.0.0.1cf003
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:websphere_portal | ibm websphere portal | eq | 7.0.0.1 |
Related
nvd
nvd
CVE-2011-2172
2011-05-26 16:55:06
prion
prion
Cross site scripting
2011-05-26 16:55:00
cvelist
cvelist
CVE-2011-2172
2011-05-26 16:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
66.1%
Related for CVE-2011-2172