CVE-2011-1360: XSS
First published: Fri Oct 28 2011(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in (1) manual/ibm/ and (2) htdocs/*/manual/ibm/.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM HTTP Server | <=2.0.47 | |
| IBM HTTP Server | =1.3.19 | |
| IBM HTTP Server | =1.3.12.2 | |
| IBM HTTP Server | =1.3.28 | |
| IBM HTTP Server | =2.0.42.1 | |
| IBM HTTP Server | =1.3.19.4 | |
| IBM HTTP Server | =1.0 | |
| IBM HTTP Server | =2.0.42 | |
| IBM HTTP Server | =1.3.19.5 | |
| IBM HTTP Server | =2.0 | |
| IBM HTTP Server | =1.3.12 | |
| IBM HTTP Server | =1.3.19.6 | |
| IBM HTTP Server | =1.3.28.1 | |
| IBM HTTP Server | =1.3.26.1 | |
| IBM HTTP Server | =2.0.42.2 | |
| IBM HTTP Server | =1.3.6.3 | |
| IBM HTTP Server | =1.3.12.7 | |
| IBM HTTP Server | =1.3.26 | |
| IBM HTTP Server | =1.3.12.6 | |
| IBM HTTP Server | =1.3.26.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-1360?
CVE-2011-1360 is classified with a medium severity due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2011-1360?
To fix CVE-2011-1360, upgrade to a version of IBM HTTP Server that is higher than 2.0.47.
What products are affected by CVE-2011-1360?
CVE-2011-1360 affects IBM HTTP Server versions 2.0.47 and earlier, and various versions from the 1.x series.
What type of vulnerability is CVE-2011-1360?
CVE-2011-1360 is a cross-site scripting (XSS) vulnerability.
Can CVE-2011-1360 be exploited remotely?
Yes, CVE-2011-1360 can be exploited by remote attackers to inject arbitrary web scripts or HTML.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/ibm
- canonical/ibm http server
- version/ibm http server/2.0.47
- version/ibm http server/1.0
- version/ibm http server/1.3.6.3
- version/ibm http server/1.3.12
- version/ibm http server/1.3.12.2
- version/ibm http server/1.3.12.6
- version/ibm http server/1.3.12.7
- version/ibm http server/1.3.19
- version/ibm http server/1.3.19.4
- version/ibm http server/1.3.19.5
- version/ibm http server/1.3.19.6
- version/ibm http server/1.3.26
- version/ibm http server/1.3.26.1
- version/ibm http server/1.3.26.2
- version/ibm http server/1.3.28
- version/ibm http server/1.3.28.1
- version/ibm http server/2.0
- version/ibm http server/2.0.42
- version/ibm http server/2.0.42.1
- version/ibm http server/2.0.42.2