Lucene search

K
cvelistMitreCVELIST:CVE-2011-2477
HistoryJun 14, 2011 - 5:00 p.m.

CVE-2011-2477

2011-06-1417:00:00
mitre
www.cve.org
5

AI Score

5.4

Confidence

High

EPSS

0.026

Percentile

90.6%

Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in Icinga before 1.4.1, when escape_html_tags is disabled, allow remote attackers to inject arbitrary web script or HTML via a JavaScript expression, as demonstrated by the onload attribute of a BODY element located after a check-host-alive! sequence, a different vulnerability than CVE-2011-2179.

AI Score

5.4

Confidence

High

EPSS

0.026

Percentile

90.6%