Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-3426
HistoryOct 14, 2011 - 10:55 a.m.

CVE-2011-3426

2011-10-1410:55:10
CWE-79
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON

Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a β€œContent-Disposition: attachment” HTTP header.

Affected configurations

NVD
Node
appleiphone_osMatch3.0-iphone
OR
appleiphone_osMatch3.1
OR
appleiphone_osMatch3.1-iphone
OR
appleiphone_osMatch3.1-ipodtouch
OR
appleiphone_osMatch3.1.2-iphone
OR
appleiphone_osMatch3.1.3-iphone
OR
appleiphone_osMatch3.2-iphone
OR
appleiphone_osMatch3.2-ipodtouch
OR
appleiphone_osMatch3.2.1
OR
appleiphone_osMatch3.2.1-ipad
OR
appleiphone_osMatch3.2.2
OR
appleiphone_osMatch4.0
OR
appleiphone_osMatch4.0-iphone
OR
appleiphone_osMatch4.0-ipodtouch
OR
appleiphone_osMatch4.0.1
OR
appleiphone_osMatch4.0.1-iphone
OR
appleiphone_osMatch4.0.1-ipodtouch
OR
appleiphone_osMatch4.0.2
OR
appleiphone_osMatch4.1
OR
appleiphone_osMatch4.2.1
OR
appleiphone_osMatch4.2.5
OR
appleiphone_osMatch4.2.8
OR
appleiphone_osMatch4.3.0
OR
appleiphone_osMatch4.3.1
OR
appleiphone_osMatch4.3.2
OR
appleiphone_osMatch4.3.3
OR
appleiphone_osMatch4.3.5
OR
appleiphone_osMatch4.3.5-ipad
OR
appleiphone_osMatch4.3.5-ipodtouch

Related

prion 1
cve 1
seebug 1
jvn 1
cvelist 1
securityvulns 3
msvr 1
nessus 3
openvas 2
prion
prion
Cross site scripting
2011-10-14 10:55:00
cve
cve
CVE-2011-3426
2011-10-14 10:55:10
seebug
seebug
Apple MobileSafariι™„δ»ΆζŸ₯ηœ‹θ·¨η«™θ„šζœ¬ζ‰§θ‘ŒζΌζ΄ž
2011-10-14 00:00:00
jvn
jvn
JVN#41657660: Safari for iOS vulnerable to cross-site scripting
2011-10-17 00:00:00
cvelist
cvelist
CVE-2011-3426
2011-10-14 10:00:00
securityvulns
securityvulns
iDefense Security Advisory 10.12.11: Apple MobileSafari Attachment Viewing Cross Site Scripting Vulnerability
2011-10-16 00:00:00
Apple iPhone multiple security vulnerabilities
2011-10-16 00:00:00
APPLE-SA-2011-10-12-1 iOS 5 Software Update
2011-10-15 00:00:00
msvr
msvr
Safari Content-Disposition Handling Could Allow Cross-site Scripting
2012-08-21 00:00:00
nessus
nessus
Mac OS X : Apple Safari < 6.0 Multiple Vulnerabilities
2012-07-26 00:00:00
Safari < 6.0 Multiple Vulnerabilities
2012-07-26 00:00:00
Safari < 6.0 Multiple Vulnerabilities
2012-07-26 00:00:00
openvas
openvas
Apple Safari Multiple Vulnerabilities - July 2012 (Mac OS X)
2012-07-30 00:00:00
Apple Safari Multiple Vulnerabilities (Jul 2012) - Mac OS X
2012-07-30 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON
Related for NVD:CVE-2011-3426
prion1cve1seebug1jvn1cvelist1securityvulns3msvr1nessus3openvas2