Unscored severity · published May 20, 2011
CVE-2011-0961
Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject…
–
CVSS
5.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the device parameter, aka Bug ID CSCto12704.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.2% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Ciscoworks Common Services · Cisco
through 3.3; 1.0; 2.2; 3.0; 3.0.3; 3.0.4; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0961
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0961
Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=23088
Exploit
http://www.exploit-db.com/exploits/17304
Exploit
http://www.securityfocus.com/bid/47902
Exploit
http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/67523
More from Ciscoworks Common Services
7.5
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…
–
CVE-2011-4237
CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers…
–
CVE-2011-2042
The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the…
–
CVE-2011-3310
The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service…
–
CVE-2011-0966
Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read…