Unscored severity · published Apr 18, 2011
CVE-2011-1716
Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors
–
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XY
Xymon · Xymon
through 4.3.0; 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +12 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1716
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1716
osvdb.org
http://osvdb.org/71489
Vendor Advisory
http://secunia.com/advisories/44036
securityreason.com
http://securityreason.com/securityalert/8209
www.securityfocus.com
http://www.securityfocus.com/archive/1/517316/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/517325/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/47156
More from Xymon
9.8
CVE-2019-13486
In Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component because of expansion in svcstatus.c
9.8
CVE-2019-13485
In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component via a long hostname or service parameter to history.c
9.8
CVE-2019-13484
In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of expansion in appfeed.c
9.8
CVE-2019-13455
In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of expansion in acknowledge.c
9.8
CVE-2019-13452
In Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c