CVE-2011-3390: XSS
Published Sep 6, 2011
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in index.php in IBM OpenAdmin Tool (OAT) before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the (1) informixserver, (2) host, or (3) port parameter in a login action.
Affected Software
11 affected components
IBM OpenAdmin Tool<=2.70
IBM OpenAdmin Tool=2.20
IBM OpenAdmin Tool=2.21
IBM OpenAdmin Tool=2.22
IBM OpenAdmin Tool=2.23
IBM OpenAdmin Tool=2.24
IBM OpenAdmin Tool=2.25
IBM OpenAdmin Tool=2.26
IBM OpenAdmin Tool=2.27
IBM OpenAdmin Tool=2.28
IBM Informix
Event History
Sep 6, 2011
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
03:55 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-3390?
CVE-2011-3390 has a moderate severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2011-3390?
To fix CVE-2011-3390, upgrade IBM OpenAdmin Tool to version 2.72 or later.
3
What impacts does CVE-2011-3390 have on affected systems?
CVE-2011-3390 allows remote attackers to execute arbitrary HTML and script code in users' browsers.
4
Which versions of IBM OpenAdmin Tool are affected by CVE-2011-3390?
CVE-2011-3390 affects IBM OpenAdmin Tool versions up to and including 2.70.
5
Can CVE-2011-3390 be exploited remotely?
Yes, CVE-2011-3390 can be exploited remotely by attackers sending crafted requests to the vulnerable application.