CVE-2011-0961

Currently unrated

Key Information:

Vendor
Cisco
Status
Ciscoworks Common Services
Vendor
CVE Published:
20 May 2011

Summary

Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the device parameter, aka Bug ID CSCto12704.

References

http://www.securityfocus.com/bid/47902
vdb-entryx_refsource_BID
http://tools.cisco.com/security/center/viewAlert.x?alertI...
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/67523
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.