CVEvulnerability
CVE-2011-1976
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-08-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."
Affected configurations
• microsoft report viewer 2005
• microsoft visual studio 2005
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://marc.info/?l=bugtraq&m=145326307707460&w=2 Third Party Advisory
- http://www.securityfocus.com/bid/49033 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA11-221A.html Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067 docs.microsoft.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773 oval.cisecurity.org
- http://marc.info/?l=bugtraq&m=145326307707460&w=2 Third Party Advisory
- http://www.securityfocus.com/bid/49033 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA11-221A.html Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067 docs.microsoft.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773 oval.cisecurity.org