Unscored severity · published May 16, 2011
CVE-2011-1899
Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EH
Ehealth · CA
6.0; 6.1; 6.1.1; 6.2.1; 6.2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1899
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1899
Vendor Advisory
http://secunia.com/advisories/44482
securityreason.com
http://securityreason.com/securityalert/8252
securitytracker.com
http://securitytracker.com/id?1025518
www.securityfocus.com
http://www.securityfocus.com/archive/1/517956/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/47795
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/67389
More from Ehealth
8.8
CVE-2016-6152
CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors
8.8
CVE-2016-6151
CA eHealth 6.2.x allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors