Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2011-1772
HistoryMay 13, 2011 - 5:00 p.m.

CVE-2011-1772

2011-05-1317:00:00
redhat
www.cve.org
2

8.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the action attribute of an s:submit element, or (3) the method attribute of an s:submit element.

Related

seebug 1
prion 2
cve 2
nvd 2
osv 2
openvas 2
nessus 1
securityvulns 2
checkpoint_advisories 1
github 2
jvn 1
packetstorm 1
cvelist 1
ibm 3
seebug
seebug
Apache Struts XWork 's:submit' HTMLζ ‡η­Ύθ·¨η«™θ„šζœ¬ζΌζ΄ž
2011-05-12 00:00:00
prion
prion
Cross site scripting
2011-05-13 17:05:00
Security feature bypass
2011-05-13 17:05:00
cve
cve
CVE-2011-1772
2011-05-13 17:05:44
CVE-2011-2088
2011-05-13 17:05:45
nvd
nvd
CVE-2011-1772
2011-05-13 17:05:44
CVE-2011-2088
2011-05-13 17:05:45
osv
osv
Cross-site Scripting in Apache Struts
2022-05-17 05:35:28
XWork in Apache Struts Reveals Sensitive Information
2022-05-14 02:55:17
openvas
openvas
Apache Struts Security Update (S2-006) - Version Check
2021-09-14 00:00:00
Apache Struts Security Update (S2-006) - Active Check
2011-05-23 00:00:00
nessus
nessus
Apache Struts 2.x < 2.2.3 Multiple XSS (S2-006)
2018-09-10 00:00:00
securityvulns
securityvulns
Apache Struts 2 Multiple Reflected XSS in XWork error pages
2011-05-11 00:00:00
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2011-05-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Struts XWork Error Page Multiple Cross-Site Scripting (CVE-2011-1772)
2013-10-13 00:00:00
github
github
Cross-site Scripting in Apache Struts
2022-05-17 05:35:28
XWork in Apache Struts Reveals Sensitive Information
2022-05-14 02:55:17
jvn
jvn
JVN#25435092: Apache Struts vulnerable to cross-site scripting
2011-12-22 00:00:00
packetstorm
packetstorm
Apache Struts 2 Cross Site Scripting
2011-05-11 00:00:00
cvelist
cvelist
CVE-2011-2088
2011-05-13 17:00:00
ibm
ibm
Security Bulletin: Order Management could be subject to multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x.
2024-04-12 17:35:43
Security Bulletin: IBM Sterling Order Management Apache Struts upgrade strategy (various CVEs, see below)
2022-09-14 17:45:15
Security Bulletin: IBM Call Center and Apache Struts Struts upgrade strategy (various CVEs, see below)
2022-09-14 17:37:56

8.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.3%

JSON
Related for CVELIST:CVE-2011-1772
seebug1prion2cve2nvd2osv2openvas2nessus1securityvulns2checkpoint_advisories1github2jvn1packetstorm1cvelist1ibm3