NVD

Id
8500  
Name
CVE-2011-1570  
Description
Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to inject arbitrary web script or HTML via a message title, a different vulnerability than CVE-2004-2030.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-05-07  
Modified Date
2011-05-31  
Seq
2011-1570  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48822 8500 CVE-2011-1570 http://issues.liferay.com/browse/LPS-12628  View
48823 8500 CVE-2011-1570 http://issues.liferay.com/browse/LPS-13250  View
48824 8500 CVE-2011-1570 http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952  View
48825 8500 CVE-2011-1570 [oss-security] 20110329 CVE requests : Liferay 6.0.6  View
48826 8500 CVE-2011-1570 [oss-security] 20110408 Re: CVE requests : Liferay 6.0.6  View
48827 8500 CVE-2011-1570 [oss-security] 20110411 Re: CVE requests : Liferay 6.0.6  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37818 JVNDB-2010-003603 Liferay Portal CE におけるクロスサイトスクリプティングの脆弱性 Liferay Portal Community Edition (CE) には、Apache Tomcat を使用している際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-1570 49477 CVE-2011-1570 8500 3.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003603.html 2010-09-13 2012-03-27 View