Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveAdobeCVE-2011-2461
HistoryDec 01, 2011 - 11:55 a.m.

CVE-2011-2461

2011-12-0111:55:06
CWE-79
adobe
web.nvd.nist.gov
40
cve
2011
2461
xss
vulnerability
adobe
flex
sdk
3.x
4.x

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.5

Confidence

High

EPSS

0.036

Percentile

91.6%

JSON

Cross-site scripting (XSS) vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from different domains.

Affected configurations

Nvd
Node
adobeflex_sdkMatch3.0
OR
adobeflex_sdkMatch3.0.1
OR
adobeflex_sdkMatch3.1
OR
adobeflex_sdkMatch3.2
OR
adobeflex_sdkMatch3.3
OR
adobeflex_sdkMatch3.4
OR
adobeflex_sdkMatch3.4.1
OR
adobeflex_sdkMatch3.5
OR
adobeflex_sdkMatch3.5a
OR
adobeflex_sdkMatch3.6
OR
adobeflex_sdkMatch4.0
OR
adobeflex_sdkMatch4.1
OR
adobeflex_sdkMatch4.5
OR
adobeflex_sdkMatch4.5.1
VendorProductVersionCPE
adobeflex_sdk3.0cpe:2.3:a:adobe:flex_sdk:3.0:*:*:*:*:*:*:*
adobeflex_sdk3.0.1cpe:2.3:a:adobe:flex_sdk:3.0.1:*:*:*:*:*:*:*
adobeflex_sdk3.1cpe:2.3:a:adobe:flex_sdk:3.1:*:*:*:*:*:*:*
adobeflex_sdk3.2cpe:2.3:a:adobe:flex_sdk:3.2:*:*:*:*:*:*:*
adobeflex_sdk3.3cpe:2.3:a:adobe:flex_sdk:3.3:*:*:*:*:*:*:*
adobeflex_sdk3.4cpe:2.3:a:adobe:flex_sdk:3.4:*:*:*:*:*:*:*
adobeflex_sdk3.4.1cpe:2.3:a:adobe:flex_sdk:3.4.1:*:*:*:*:*:*:*
adobeflex_sdk3.5cpe:2.3:a:adobe:flex_sdk:3.5:*:*:*:*:*:*:*
adobeflex_sdk3.5acpe:2.3:a:adobe:flex_sdk:3.5a:*:*:*:*:*:*:*
adobeflex_sdk3.6cpe:2.3:a:adobe:flex_sdk:3.6:*:*:*:*:*:*:*
Rows per page:
1-10 of 141

Related

prion 1
nvd 1
packetstorm 1
f5 1
openvas 3
threatpost 3
seebug 1
zeroscience 1
checkpoint_advisories 1
cvelist 1
zdt 1
nessus 1
prion
prion
Cross site scripting
2011-12-01 11:55:00
nvd
nvd
CVE-2011-2461
2011-12-01 11:55:06
packetstorm
packetstorm
Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass
2016-12-30 00:00:00
f5
f5
K62050299 : Adobe Flex vulnerability CVE-2011-2461
2017-10-26 00:00:00
openvas
openvas
Adobe Flex SDK 'SWF' Files Cross-Site Scripting Vulnerability (Windows)
2011-12-13 00:00:00
Adobe Flex SDK 'SWF' Files Cross-Site Scripting Vulnerability - Windows
2011-12-13 00:00:00
Magento Cross Site Scripting Vulnerability
2014-11-05 00:00:00
threatpost
threatpost
Adobe CVE-2011-2461 Remains Exploitable Via Flex Four Years After Patch
2015-03-23 11:38:42
Cisco Small Business IP Phones Open to Remote Eavesdropping
2015-03-23 10:46:05
Hilton Hotels Fix CSRF Vulnerability That Exposed All Accounts
2015-03-23 13:19:17
seebug
seebug
Adobe Flex SDK 跨站脚本执行漏洞(CVE-2011-2461)
2011-12-02 00:00:00
zeroscience
zeroscience
Dell SonicWALL Global Management System (GMS) 8.1 Adobe Flex SOP Bypass
2016-12-29 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flex SDK Flex-Generated SWF File Cross-Site Scripting (APSB11-25; CVE-2011-2461)
2011-12-06 00:00:00
cvelist
cvelist
CVE-2011-2461
2011-12-01 11:00:00
zdt
zdt
Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass Vulnerability
2016-12-31 00:00:00
nessus
nessus
HP Systems Insight Manager < 7.0 Multiple Vulnerabilities
2012-06-15 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.5

Confidence

High

EPSS

0.036

Percentile

91.6%

JSON
Related for CVE-2011-2461
prion1nvd1packetstorm1f51openvas3threatpost3seebug1zeroscience1checkpoint_advisories1cvelist1zdt1nessus1