CVEvulnerability
CVE-2011-3320
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-11-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Affected configurations
• ge intelligent platforms proficy historian (<= 4.0)
• ge intelligent platforms proficy historian 3.1
• ge intelligent platforms proficy historian 3.5
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/bid/50473 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-243-02.pdf US Government Resource
- http://www.securityfocus.com/bid/50473 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-243-02.pdf US Government Resource