CVE-2011-0459

Cyber-ark Password Vault Web Access < 5.0 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Cyber-Ark Password Vault Web Access (PVWA) 5.0 and earlier, 5.5 through 5.5 patch 4, and 6.0 through 6.0 patch 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (4)

[Vendor Advisory] http://secunia.com/advisories/44058

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/47271

[Third Party Advisory] http://jvn.jp/en/jp/JVN11424086/index.html

[Third Party Advisory] http://jvndb.jvn.jp/jvndb/JVNDB-2011-000023

Scores

EPSS 0.0029

EPSS Percentile 51.7%

Classification

CWE

CWE-79

Status published

Affected Products (7)

cyber-ark/password_vault_web_access < 5.0

cyber-ark/password_vault_web_access

n/a/n/a

Timeline

Published Oct 05, 2011

Tracked Since Feb 18, 2026