{"id":"CVE-2011-4690","url":"https://www.cyber-defence.io/tools/cve/CVE-2011-4690","generatedAt":"2026-10-27T17:43:53.899Z","title":"Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted…","description":"Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.","published":"2011-12-07T19:55:03.000Z","lastModified":"2026-06-16T23:35:15.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":5,"severity":"MEDIUM","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N"},"cwe":["CWE-264"],"affected":["opera/opera browser"],"epss":{"score":0.01147,"percentile":0.66554,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.15%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://lcamtuf.coredump.cx/cachetime/","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/47128","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://lcamtuf.coredump.cx/cachetime/","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/47128","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-4690","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}