Unscored severity · published Apr 10, 2011
CVE-2011-0462
Multiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service (OBS) before 2.1.6 allow remote attackers to inject…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the login page in the webui component in SUSE openSUSE Build Service (OBS) before 2.1.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OB
Opensuse Build Service · Novell
through 2.1.5.1; 1.0; 1.5; 1.6; 1.7; 1.7.0; +31 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0462
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0462
news.opensuse.org
http://news.opensuse.org/2011/03/02/build-service-team-releases-new-versions-fixing-security-problems/
bugzilla.novell.com
https://bugzilla.novell.com/show_bug.cgi?id=669909
More from Opensuse Build Service
–
CVE-2011-0466
The API in SUSE openSUSE Build Service (OBS) 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a (1) package or…