Lucene search
HistoryMay 26, 2011 - 4:55 p.m.
CVE-2011-2172
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.003
Percentile
66.0%
Cross-site scripting (XSS) vulnerability in the search center in IBM WebSphere Portal 7.0.0.1 before CF004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
ibmwebsphere_portalMatch7.0.0.1
ORibmwebsphere_portalMatch7.0.0.1cf002
ORibmwebsphere_portalMatch7.0.0.1cf003
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | websphere_portal | 7.0.0.1 | cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:* |
| ibm | websphere_portal | 7.0.0.1 | cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf002:*:*:*:*:*:* |
| ibm | websphere_portal | 7.0.0.1 | cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf003:*:*:*:*:*:* |
Related
cve
cve
CVE-2011-2172
2011-05-26 16:55:06
cvelist
cvelist
CVE-2011-2172
2011-05-26 16:00:00
prion
prion
Cross site scripting
2011-05-26 16:55:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.003
Percentile
66.0%
Related for NVD:CVE-2011-2172