CVE-2011-1518

Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.4.x before 2.4.10 and 3.x before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published Bycve@mitre.org

Published DateApr 18, 2011, 18:55

Weakness Type (CWE):CWE-79

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE

References

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
http://otrs.org/advisory/OSA-2011-01-en/
http://secunia.com/advisories/44029
http://secunia.com/advisories/44479
http://www.debian.org/security/2011/dsa-2231
http://www.osvdb.org/71790
http://www.securityfocus.com/bid/47323
http://www.vupen.com/english/advisories/2011/1186
https://exchange.xforce.ibmcloud.com/vulnerabilities/66698

Weakness Type (CWE):CWE-79

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE