VulnerabilityModified
CVE-2011-3390
Multiple cross-site scripting (XSS) vulnerabilities in index.php in IBM OpenAdmin Tool (OAT) before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the (1) informixserver, (2) host, or (3) port parameter in a login…
MEDIUM 4.3EPSS 3.64%
Does this matter?
Lower severity and a low EPSS score (3.64%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in IBM OpenAdmin Tool (OAT) before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the (1) informixserver, (2) host, or (3) port parameter in a login action.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 3.64% probability · 89th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- ibm/openadmin tool
- Source
- cve@mitre.org
References
- http://securityreason.com/securityalert/8370
- http://voidroot.blogspot.com/2011/08/xss-in-ibm-open-admin-tool.htmlExploit
- http://www.securityfocus.com/archive/1/519468/100/0/threaded
- http://www.securityfocus.com/bid/49364Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69488
- http://securityreason.com/securityalert/8370
- http://voidroot.blogspot.com/2011/08/xss-in-ibm-open-admin-tool.htmlExploit
- http://www.securityfocus.com/archive/1/519468/100/0/threaded
- http://www.securityfocus.com/bid/49364Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69488
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.