NVD

Id
9448  
Name
CVE-2011-2712  
Description
Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-08-29  
Modified Date
2011-10-05  
Seq
2011-2712  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53971 9448 CVE-2011-2712 8357  View
53972 9448 CVE-2011-2712 http://wicket.apache.org/2011/08/23/cve-2011-2712.html  View
53973 9448 CVE-2011-2712 20110823 [CVE-2011-2712] Apache Wicket XSS vulnerability  View
53974 9448 CVE-2011-2712 49290  View
53975 9448 CVE-2011-2712 1025976  View
53976 9448 CVE-2011-2712 apache-wicket-multi-window-xss(69394)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34547 JVNDB-2011-004789 Apache Wicket におけるクロスサイトスクリプティングの脆弱性 Apache Wicket には、setAutomaticMultiWindowSupport を有効にした際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-2712 50619 CVE-2011-2712 9448 2.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004789.html 2011-08-29 2012-03-27 View