CVE-2011-4580: XSS

Published Feb 26, 2014
·
Updated

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

10 affected components
redhat Jboss Enterprise Portal Platform=4.3.0-cp03
redhat Jboss Enterprise Portal Platform=5.0.0
redhat Jboss Enterprise Portal Platform=5.1.0
redhat Jboss Enterprise Portal Platform=4.3.0-cp06
redhat Jboss Enterprise Portal Platform=4.3.0-cp07
redhat Jboss Enterprise Portal Platform=4.3.0
redhat Jboss Enterprise Portal Platform<=5.1.1
redhat Jboss Enterprise Portal Platform=4.3.0-cp05
redhat Jboss Enterprise Portal Platform=5.0.1
redhat Jboss Enterprise Portal Platform=4.3.0-cp04

Event History

Feb 26, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:55 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2011-4580?

CVE-2011-4580 has a severity rating that allows remote attackers to exploit cross-site scripting vulnerabilities.

2

How do I fix CVE-2011-4580?

To fix CVE-2011-4580, it is recommended to upgrade to Red Hat JBoss Enterprise Portal Platform version 5.2.0 or later.

3

What types of attacks can be performed due to CVE-2011-4580?

CVE-2011-4580 allows attackers to inject arbitrary web scripts or HTML via multiple vectors, leading to potential phishing attacks or session hijacking.

4

Which versions of Red Hat JBoss Enterprise Portal Platform are affected by CVE-2011-4580?

CVE-2011-4580 affects Red Hat JBoss Enterprise Portal Platform versions up to 5.1.1, including multiple versions 4.3.0 and 5.0.0.

5

Are there any specific vectors mentioned for exploiting CVE-2011-4580?

CVE-2011-4580 does not specify the exact vectors, indicating multiple unknown entry points for exploitation.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203