Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-1772
HistoryMay 13, 2011 - 5:05 p.m.

CVE-2011-1772

2011-05-1317:05:44
CWE-79
[email protected]
web.nvd.nist.gov
42
cve-2011-1772
xss
apache
struts 2.x
security vulnerability
cross-site scripting
nvd

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the action attribute of an s:submit element, or (3) the method attribute of an s:submit element.

Affected configurations

NVD
Node
apachestrutsMatch2.0.0
OR
apachestrutsMatch2.0.1
OR
apachestrutsMatch2.0.2
OR
apachestrutsMatch2.0.3
OR
apachestrutsMatch2.0.4
OR
apachestrutsMatch2.0.5
OR
apachestrutsMatch2.0.6
OR
apachestrutsMatch2.0.7
OR
apachestrutsMatch2.0.8
OR
apachestrutsMatch2.0.9
OR
apachestrutsMatch2.0.10
OR
apachestrutsMatch2.0.11
OR
apachestrutsMatch2.0.11.1
OR
apachestrutsMatch2.0.11.2
OR
apachestrutsMatch2.0.12
OR
apachestrutsMatch2.0.13
OR
apachestrutsMatch2.0.14
OR
apachestrutsMatch2.1.0
OR
apachestrutsMatch2.1.1
OR
apachestrutsMatch2.1.2
OR
apachestrutsMatch2.1.3
OR
apachestrutsMatch2.1.4
OR
apachestrutsMatch2.1.5
OR
apachestrutsMatch2.1.6
OR
apachestrutsMatch2.1.8
OR
apachestrutsMatch2.1.8.1
OR
apachestrutsMatch2.2.1
OR
apachestrutsMatch2.2.1.1
Node
opensymphonywebwork
OR
opensymphonyxwork

Related

osv 2
seebug 1
prion 2
nvd 2
securityvulns 2
openvas 2
nessus 1
checkpoint_advisories 1
github 2
jvn 1
packetstorm 1
cvelist 2
cve 1
ibm 3
osv
osv
Cross-site Scripting in Apache Struts
2022-05-17 05:35:28
XWork in Apache Struts Reveals Sensitive Information
2022-05-14 02:55:17
seebug
seebug
Apache Struts XWork 's:submit' HTMLζ ‡η­Ύθ·¨η«™θ„šζœ¬ζΌζ΄ž
2011-05-12 00:00:00
prion
prion
Cross site scripting
2011-05-13 17:05:00
Security feature bypass
2011-05-13 17:05:00
nvd
nvd
CVE-2011-1772
2011-05-13 17:05:44
CVE-2011-2088
2011-05-13 17:05:45
securityvulns
securityvulns
Apache Struts 2 Multiple Reflected XSS in XWork error pages
2011-05-11 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2011-05-11 00:00:00
openvas
openvas
Apache Struts Security Update (S2-006) - Version Check
2021-09-14 00:00:00
Apache Struts Security Update (S2-006) - Active Check
2011-05-23 00:00:00
nessus
nessus
Apache Struts 2.x < 2.2.3 Multiple XSS (S2-006)
2018-09-10 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Struts XWork Error Page Multiple Cross-Site Scripting (CVE-2011-1772)
2013-10-13 00:00:00
github
github
Cross-site Scripting in Apache Struts
2022-05-17 05:35:28
XWork in Apache Struts Reveals Sensitive Information
2022-05-14 02:55:17
jvn
jvn
JVN#25435092: Apache Struts vulnerable to cross-site scripting
2011-12-22 00:00:00
packetstorm
packetstorm
Apache Struts 2 Cross Site Scripting
2011-05-11 00:00:00
cvelist
cvelist
CVE-2011-1772
2011-05-13 17:00:00
CVE-2011-2088
2011-05-13 17:00:00
cve
cve
CVE-2011-2088
2011-05-13 17:05:45
ibm
ibm
Security Bulletin: Order Management could be subject to multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x.
2024-04-12 17:35:43
Security Bulletin: IBM Sterling Order Management Apache Struts upgrade strategy (various CVEs, see below)
2022-09-14 17:45:15
Security Bulletin: IBM Call Center and Apache Struts Struts upgrade strategy (various CVEs, see below)
2022-09-14 17:37:56

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.3%

JSON
Related for CVE-2011-1772
osv2seebug1prion2nvd2securityvulns2openvas2nessus1checkpoint_advisories1github2jvn1packetstorm1cvelist2cve1ibm3