CVE-2011-1744

EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions, which allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site...

Cross site scripting

Cross-site scripting XSS vulnerability in EMC Captiva eInput 2.1.1 before 2.1.1.37 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1743

CVE-2011-1743 is an XSS vulnerability in EMC Captiva eInput 2.1.1 prior to 2.1.1.37. The issue affects EMC Captiva eInput components (2.1.1 family) and allows remote attackers to inject script/HTML via unspecified vectors; CVSS details in NVD indicate a medium base score with partial integrity im...

CVE-2011-1743

Cross-site scripting XSS vulnerability in EMC Captiva eInput 2.1.1 before 2.1.1.37 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1744

EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions, which allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site...

CVE-2011-1744

EMC Captiva eInput 2.1.1 before 2.1.1.37 is affected by CVE-2011-1744, where ActiveX function calls are not restricted to trusted origins. This enables a remote attacker to read arbitrary files or cause a denial of service via a crafted web site. The issue affects EMC Captiva eInput versions prio...

EMC Captiva eInput security vulnerabilities

Crossite scripting, unsafe ActiveX methods...

ESA-2011-024: EMC Captiva eInput multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-024: EMC Captiva eInput multiple vulnerabilities. EMC Identifier: ESA-2011-024 CVE Identifier: CVE-2011-1743, CVE-2011-1744 Affected products: EMC SW: EMC Captiva eInput 2.1.1 Vulnerability Summary: EMC Captiva eInput contains two...