CVE-2011-1716

2011-04-1800:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

68.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon
before 4.3.1 allow remote attackers to inject arbitrary web script or HTML
via unspecified vectors.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/xymon/+bug/1092412>

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchxymon< 4.3.0~beta2.dfsg-5ubuntu0.1UNKNOWN
ubuntu11.10noarchxymon< 4.3.0~beta2.dfsg-9ubuntu1.1UNKNOWN
ubuntu12.04noarchxymon< 4.3.0~beta2.dfsg-9.1ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	xymon	< 4.3.0~beta2.dfsg-5ubuntu0.1	UNKNOWN
ubuntu	11.10	noarch	xymon	< 4.3.0~beta2.dfsg-9ubuntu1.1	UNKNOWN
ubuntu	12.04	noarch	xymon	< 4.3.0~beta2.dfsg-9.1ubuntu0.1	UNKNOWN