XSS in EMC Data Loss Prevention Enterprise Manager
CVE-2011-1423
Cross-site scripting (XSS) vulnerability in RSA Data Loss Prevention (DLP) Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.011 (60.9th percentile) — read the EPSS interpretation.
Affected products
- Emc Data_loss_prevention_enterprise_manager — versions 8.0, 8.5
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
- security_alert@emc.com (vdb-entry, x_refsource_XF)
- security_alert@emc.com (x_refsource_SREASON, third-party-advisory)
- security_alert@emc.com (vdb-entry, x_refsource_BID)