CVE-2011-4887

2014-09-1114:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.9%

JSON

Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.

References

osvdb.org/79338

secunia.com/advisories/48086

www.imperva.com/Services/adc_advisories_response_secureworks_CVE_2011_4887

www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2012-002/

www.securityfocus.com/bid/52064

exchange.xforce.ibmcloud.com/vulnerabilities/73264