Lucene search

[email protected]CVE-2011-0462

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-0462

2022-10-0316:15:19

CWE-79

[email protected]

web.nvd.nist.gov

cve-2011-0462

xss vulnerabilities

suse

obs

webui

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service (OBS) before 2.1.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

novellopensuse_build_serviceRange≤2.1.5.1

novellopensuse_build_serviceMatch1.0

novellopensuse_build_serviceMatch1.5

novellopensuse_build_serviceMatch1.6

novellopensuse_build_serviceMatch1.7

novellopensuse_build_serviceMatch1.7.0

novellopensuse_build_serviceMatch1.7.2

novellopensuse_build_serviceMatch1.7.3

novellopensuse_build_serviceMatch1.7.4

novellopensuse_build_serviceMatch1.7.5

novellopensuse_build_serviceMatch1.7.6

novellopensuse_build_serviceMatch1.7.7

novellopensuse_build_serviceMatch1.8

novellopensuse_build_serviceMatch1.9.90

novellopensuse_build_serviceMatch1.9.91

novellopensuse_build_serviceMatch1.9.92

novellopensuse_build_serviceMatch2.0

novellopensuse_build_serviceMatch2.0.0

novellopensuse_build_serviceMatch2.0.1

novellopensuse_build_serviceMatch2.0.2

novellopensuse_build_serviceMatch2.0.3

novellopensuse_build_serviceMatch2.0.4

novellopensuse_build_serviceMatch2.0.5

novellopensuse_build_serviceMatch2.0.6

novellopensuse_build_serviceMatch2.0.7

novellopensuse_build_serviceMatch2.0.8

novellopensuse_build_serviceMatch2.0.16

novellopensuse_build_serviceMatch2.0.103

novellopensuse_build_serviceMatch2.0.104

novellopensuse_build_serviceMatch2.0.106

novellopensuse_build_serviceMatch2.1

novellopensuse_build_serviceMatch2.1.0

novellopensuse_build_serviceMatch2.1.1

novellopensuse_build_serviceMatch2.1.2

novellopensuse_build_serviceMatch2.1.3

novellopensuse_build_serviceMatch2.1.4

novellopensuse_build_serviceMatch2.1.5

CPENameOperatorVersion
novell:opensuse_build_servicenovell opensuse build servicele2.1.5.1
novell:opensuse_build_servicenovell opensuse build serviceeq1.0
novell:opensuse_build_servicenovell opensuse build serviceeq1.5
novell:opensuse_build_servicenovell opensuse build serviceeq1.6
novell:opensuse_build_servicenovell opensuse build serviceeq1.7
novell:opensuse_build_servicenovell opensuse build serviceeq1.7.0
novell:opensuse_build_servicenovell opensuse build serviceeq1.7.2
novell:opensuse_build_servicenovell opensuse build serviceeq1.7.3
novell:opensuse_build_servicenovell opensuse build serviceeq1.7.4
novell:opensuse_build_servicenovell opensuse build serviceeq1.7.5

CPE	Name	Operator	Version
novell:opensuse_build_service	novell opensuse build service	le	2.1.5.1
novell:opensuse_build_service	novell opensuse build service	eq	1.0
novell:opensuse_build_service	novell opensuse build service	eq	1.5
novell:opensuse_build_service	novell opensuse build service	eq	1.6
novell:opensuse_build_service	novell opensuse build service	eq	1.7
novell:opensuse_build_service	novell opensuse build service	eq	1.7.0
novell:opensuse_build_service	novell opensuse build service	eq	1.7.2
novell:opensuse_build_service	novell opensuse build service	eq	1.7.3
novell:opensuse_build_service	novell opensuse build service	eq	1.7.4
novell:opensuse_build_service	novell opensuse build service	eq	1.7.5

Rows per page:

1-10 of 371

References

news.opensuse.org/2011/03/02/build-service-team-releases-new-versions-fixing-security-problems/

bugzilla.novell.com/show_bug.cgi?id=669909

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

JSON

Related for CVE-2011-0462

nvd1 prion1 cvelist1