CVE-2011-1360: XSS
First published: Fri Oct 28 2011(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in (1) manual/ibm/ and (2) htdocs/*/manual/ibm/.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM HTTP Server | <=2.0.47 | |
| IBM HTTP Server | =1.3.19 | |
| IBM HTTP Server | =1.3.12.2 | |
| IBM HTTP Server | =1.3.28 | |
| IBM HTTP Server | =2.0.42.1 | |
| IBM HTTP Server | =1.3.19.4 | |
| IBM HTTP Server | =1.0 | |
| IBM HTTP Server | =2.0.42 | |
| IBM HTTP Server | =1.3.19.5 | |
| IBM HTTP Server | =2.0 | |
| IBM HTTP Server | =1.3.12 | |
| IBM HTTP Server | =1.3.19.6 | |
| IBM HTTP Server | =1.3.28.1 | |
| IBM HTTP Server | =1.3.26.1 | |
| IBM HTTP Server | =2.0.42.2 | |
| IBM HTTP Server | =1.3.6.3 | |
| IBM HTTP Server | =1.3.12.7 | |
| IBM HTTP Server | =1.3.26 | |
| IBM HTTP Server | =1.3.12.6 | |
| IBM HTTP Server | =1.3.26.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm http server
- version/ibm http server/2.0.47
- version/ibm http server/1.3.19
- version/ibm http server/1.3.12.2
- version/ibm http server/1.3.28
- version/ibm http server/2.0.42.1
- version/ibm http server/1.3.19.4
- version/ibm http server/1.0
- version/ibm http server/2.0.42
- version/ibm http server/1.3.19.5
- version/ibm http server/2.0
- version/ibm http server/1.3.12
- version/ibm http server/1.3.19.6
- version/ibm http server/1.3.28.1
- version/ibm http server/1.3.26.1
- version/ibm http server/2.0.42.2
- version/ibm http server/1.3.6.3
- version/ibm http server/1.3.12.7
- version/ibm http server/1.3.26
- version/ibm http server/1.3.12.6
- version/ibm http server/1.3.26.2