Unscored severity · published May 4, 2011
CVE-2011-1825
Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AW
Arcot Webfort Versatile Authentication Server · CA
through 6.2.4 · source: NVD
Affected product
AW
Arcot Webfort Versatile Authentication Server
CA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1825
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1825
osvdb.org
http://osvdb.org/72124
Vendor Advisory
http://secunia.com/advisories/44317
www.securityfocus.com
http://www.securityfocus.com/archive/1/517702/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/47587
www.securitytracker.com
http://www.securitytracker.com/id?1025444
www.vupen.com
http://www.vupen.com/english/advisories/2011/1114
More from Arcot Webfort Versatile Authentication Server
–
CVE-2011-1826
Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allows remote attackers to redirect users to…