Description
Multiple cross-site scripting (XSS) vulnerabilities in Ecava IntegraXor before 3.60 (Build 4080) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/68896
Various Sources x_refsource_confirm
http://www.integraxor.com/blog/security-issue-xss-vulnerability-note
Patch, US Government Resource x_refsource_misc
http://www.us-cert.gov/control_systems/pdf/ICSA-11-147-02.pdf
Scores
EPSS
0.0120
EPSS Percentile
64.9%
Details
CWE
CWE-79
Status
published
Products (5)
ecava/integraxor
3.5.3900.5
ecava/integraxor
3.5.3900.10
ecava/integraxor
3.6.4000.0
ecava/integraxor
3.60
ecava/integraxor
< 3.60.4061
Published
Jul 28, 2011
Tracked Since
Feb 18, 2026