Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-3243
HistoryOct 14, 2011 - 10:55 a.m.

CVE-2011-3243

2011-10-1410:55:09
CWE-79
[email protected]
web.nvd.nist.gov
47
2
cve-2011-3243
cross-site scripting
xss
webkit
apple ios
safari
remote attackers
web script
html
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.5%

JSON

Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5 and Safari before 5.1.1, allows remote attackers to inject arbitrary web script or HTML via vectors involving inactive DOM windows.

Affected configurations

NVD
Node
appleiphone_osMatch3.0-iphone
OR
appleiphone_osMatch3.1
OR
appleiphone_osMatch3.1-iphone
OR
appleiphone_osMatch3.1-ipodtouch
OR
appleiphone_osMatch3.1.2-iphone
OR
appleiphone_osMatch3.1.3-iphone
OR
appleiphone_osMatch3.2-iphone
OR
appleiphone_osMatch3.2-ipodtouch
OR
appleiphone_osMatch3.2.1
OR
appleiphone_osMatch3.2.1-ipad
OR
appleiphone_osMatch3.2.2
OR
appleiphone_osMatch4.0
OR
appleiphone_osMatch4.0-iphone
OR
appleiphone_osMatch4.0-ipodtouch
OR
appleiphone_osMatch4.0.1
OR
appleiphone_osMatch4.0.1-iphone
OR
appleiphone_osMatch4.0.1-ipodtouch
OR
appleiphone_osMatch4.0.2
OR
appleiphone_osMatch4.1
OR
appleiphone_osMatch4.2.1
OR
appleiphone_osMatch4.2.5
OR
appleiphone_osMatch4.2.8
OR
appleiphone_osMatch4.3.0
OR
appleiphone_osMatch4.3.1
OR
appleiphone_osMatch4.3.2
OR
appleiphone_osMatch4.3.3
OR
appleiphone_osMatch4.3.5
OR
appleiphone_osMatch4.3.5-ipad
OR
appleiphone_osMatch4.3.5-ipodtouch
Node
applesafari
OR
applesafariRange≤5.1
OR
applesafariMatch1.0
OR
applesafariMatch1.0beta
OR
applesafariMatch1.0beta2
OR
applesafariMatch1.0.0
OR
applesafariMatch1.0.0b1
OR
applesafariMatch1.0.0b2
OR
applesafariMatch1.0.1
OR
applesafariMatch1.0.2
OR
applesafariMatch1.0.3
OR
applesafariMatch1.0.385.8
OR
applesafariMatch1.0.385.8.1
OR
applesafariMatch1.0b1-mac
OR
applesafariMatch1.1
OR
applesafariMatch1.1.0
OR
applesafariMatch1.1.1
OR
applesafariMatch1.2
OR
applesafariMatch1.2.0
OR
applesafariMatch1.2.1
OR
applesafariMatch1.2.2
OR
applesafariMatch1.2.3
OR
applesafariMatch1.2.4
OR
applesafariMatch1.2.5
OR
applesafariMatch1.3
OR
applesafariMatch1.3.0
OR
applesafariMatch1.3.1
OR
applesafariMatch1.3.2
OR
applesafariMatch1.3.2312.5
OR
applesafariMatch1.3.2312.6
OR
applesafariMatch2
OR
applesafariMatch2.0
OR
applesafariMatch2.0.0
OR
applesafariMatch2.0.1
OR
applesafariMatch2.0.2
OR
applesafariMatch2.0.3
OR
applesafariMatch2.0.3417.8
OR
applesafariMatch2.0.3417.9
OR
applesafariMatch2.0.3417.9.2
OR
applesafariMatch2.0.3417.9.3
OR
applesafariMatch2.0.4
OR
applesafariMatch2.0.4-mac
OR
applesafariMatch3
OR
applesafariMatch3.0
OR
applesafariMatch3.0.0
OR
applesafariMatch3.0.0-mac
OR
applesafariMatch3.0.0b
OR
applesafariMatch3.0.0b-windows
OR
applesafariMatch3.0.1
OR
applesafariMatch3.0.1-mac
OR
applesafariMatch3.0.1beta
OR
applesafariMatch3.0.1b
OR
applesafariMatch3.0.1b-windows
OR
applesafariMatch3.0.2
OR
applesafariMatch3.0.2-mac
OR
applesafariMatch3.0.2b
OR
applesafariMatch3.0.2b-windows
OR
applesafariMatch3.0.3
OR
applesafariMatch3.0.3-mac
OR
applesafariMatch3.0.3b
OR
applesafariMatch3.0.3b-windows
OR
applesafariMatch3.0.4
OR
applesafariMatch3.0.4-mac
OR
applesafariMatch3.0.4b
OR
applesafariMatch3.0.4b-windows
OR
applesafariMatch3.1.0
OR
applesafariMatch3.1.0-mac
OR
applesafariMatch3.1.0b
OR
applesafariMatch3.1.0b-windows
OR
applesafariMatch3.1.1
OR
applesafariMatch3.1.1b-windows
OR
applesafariMatch3.1.2
OR
applesafariMatch3.1.2b-windows
OR
applesafariMatch3.2.0
OR
applesafariMatch3.2.0b-windows
OR
applesafariMatch3.2.1
OR
applesafariMatch3.2.1b-windows
OR
applesafariMatch3.2.2
OR
applesafariMatch3.2.2b-windows
OR
applesafariMatch4.0
OR
applesafariMatch4.0beta
OR
applesafariMatch4.0.0b
OR
applesafariMatch4.0.1
OR
applesafariMatch4.0.2
OR
applesafariMatch4.0.3
OR
applesafariMatch4.0.4
OR
applesafariMatch4.0.5
OR
applesafariMatch4.1
OR
applesafariMatch4.1.1
OR
applesafariMatch4.1.2
OR
applesafariMatch5.0
OR
applesafariMatch5.0.1
OR
applesafariMatch5.0.2
OR
applesafariMatch5.0.3
OR
applesafariMatch5.0.4
OR
applesafariMatch5.0.5
OR
applesafariMatch5.0.6

Social References

More

Related

nvd 1
ubuntucve 1
prion 1
cvelist 1
openvas 4
securityvulns 3
nessus 3
nvd
nvd
CVE-2011-3243
2011-10-14 10:55:09
ubuntucve
ubuntucve
CVE-2011-3243
2011-10-14 00:00:00
prion
prion
Cross site scripting
2011-10-14 10:55:00
cvelist
cvelist
CVE-2011-3243
2011-10-14 10:00:00
openvas
openvas
Apple Safari Multiple Vulnerabilities - Oct 2011 (Windows)
2012-05-24 00:00:00
Apple Safari Multiple Vulnerabilities (Oct 2011) - Windows
2012-05-24 00:00:00
Apple Mac OS X v10.6.8 Safari Multiple Vulnerabilities
2011-10-20 00:00:00
securityvulns
securityvulns
APPLE-SA-2011-10-12-4 Safari 5.1.1
2011-10-15 00:00:00
APPLE-SA-2011-10-12-1 iOS 5 Software Update
2011-10-15 00:00:00
Apple iPhone multiple security vulnerabilities
2011-10-16 00:00:00
nessus
nessus
Safari < 5.1.1 Multiple Vulnerabilities
2011-10-13 00:00:00
Mac OS X : Apple Safari < 5.1.1
2011-10-13 00:00:00
Apple iOS < 5.0 Multiple Vulnerabilities (BEAST)
2012-06-19 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.5%

JSON
Related for CVE-2011-3243
nvd1ubuntucve1prion1cvelist1openvas4securityvulns3nessus3