CVE-2011-1264
Windows Server 2003 SP2 and Server 2008 - Cross-Site Scripting in Active Directory Certificate Services Web Enrollment
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory Certificate Services Vulnerability."
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12749
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-051
Scores
EPSS
0.0515
EPSS Percentile
91.5%
Details
CWE
CWE-79
Status
published
Products (4)
microsoft/windows_2003_server
microsoft/windows_server_2003
microsoft/windows_server_2008
(4 CPE variants)
microsoft/windows_server_2008
r2
Published
Jun 16, 2011
Tracked Since
Feb 18, 2026