CVE-2011-0767

MEDIO 4.3CVE-2011-0767 · Published 06/06/2011 · updated 16/06/2026

En resumen

CVE-2011-0767 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a securesphere web application firewall (imperva).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 69.3% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
securesphere web application firewall imperva	`= 6.2= 7.0= 7.0.0.7061= 7.0.0.7078= 7.5= 8.0= 8.5`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759.

References

secunia.com/advisories/44772 · Vendor Advisory
imperva.com/resources/adc/adc_advisories_response_secureworks.html · Vendor Advisory
kb.cert.org/vuls/id/567774 · US Government Resource
secureworks.com/research/advisories/SWRX-2011-001
exchange.xforce.ibmcloud.com/vulnerabilities/67779

Más vulnerabilidades de securesphere web application firewall

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free