Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2011-1689

Date: April 22, 2011

Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Severity Score

Related Resources (13)

http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html
http://secunia.com/advisories/44189
https://bugzilla.redhat.com/show_bug.cgi?id=696795
http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html
http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.html
http://www.vupen.com/english/advisories/2011/1071
https://exchange.xforce.ibmcloud.com/vulnerabilities/66796
https://nvd.nist.gov/vuln/detail/CVE-2011-1689
http://www.debian.org/security/2011/dsa-2220
https://people.canonical.com/~ubuntu-security/cve/CVE-2011-1689
http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html
http://www.securityfocus.com/bid/47383
https://www.mend.io/vulnerability-database/CVE-2011-1689

Severity Score

Weakness Type (CWE)

Cross-Site Scripting (XSS)

CWE-79

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us