CVEvulnerability
CVE-2011-1825
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-05-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ca arcot webfort versatile authentication server (<= 6.2.4)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/72124 osvdb.org
- http://secunia.com/advisories/44317 Vendor Advisory
- http://www.securityfocus.com/archive/1/517702/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/47587 www.securityfocus.com
- http://www.securitytracker.com/id?1025444 www.securitytracker.com
- http://www.vupen.com/english/advisories/2011/1114 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67104 exchange.xforce.ibmcloud.com
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BA71F5839-D214-4719-B918-4476E4537998%7D support.ca.com
- http://osvdb.org/72124 osvdb.org
- http://secunia.com/advisories/44317 Vendor Advisory
- http://www.securityfocus.com/archive/1/517702/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/47587 www.securityfocus.com
- http://www.securitytracker.com/id?1025444 www.securitytracker.com
- http://www.vupen.com/english/advisories/2011/1114 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67104 exchange.xforce.ibmcloud.com
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BA71F5839-D214-4719-B918-4476E4537998%7D support.ca.com