Unscored severity · published Oct 28, 2011
CVE-2011-1360
Multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in (1) manual/ibm/ and (2) htdocs/*/manual/ibm/.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HS
Http Server · Ibm
through 2.0.47; 1.0; 1.3.6.3; 1.3.12; 1.3.12.2; 1.3.12.6; +14 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1360
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1360
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg21502580
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg1PM41293
www.securityfocus.com
http://www.securityfocus.com/bid/50447
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/69656
More from Http Server
9.8
CVE-2026-9170
IBM HTTP Server is affected by multiple vulnerabilities
9.8
CVE-2026-8855
IBM HTTP Server is affected by multiple vulnerabilities
9.1
CVE-2026-8856
IBM HTTP Server is affected by multiple vulnerabilities
8.0
CVE-2026-8834
IBM HTTP Server is affected by multiple vulnerabilities
7.5
CVE-2026-8854
IBM HTTP Server is affected by multiple vulnerabilities