CVE-2011-4887

Description

Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/73264

http://www.securityfocus.com/bid/52064

http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2012-002/

http://www.imperva.com/Services/adc_advisories_response_secureworks_CVE_2011_4887

http://secunia.com/advisories/48086

http://osvdb.org/79338

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS