CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-1524

Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different vulnerability than CVE-2011-0545.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.146

EPSS Ranking 94.2%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2011-1524

Symantec » Liveupdate Administrator » Version: 1.5.3.21

cpe:2.3:a:symantec:liveupdate_administrator:1.5.3.21
Symantec » Liveupdate Administrator » Version: 1.5.4

cpe:2.3:a:symantec:liveupdate_administrator:1.5.4
Symantec » Liveupdate Administrator » Version: 1.5.7.19

cpe:2.3:a:symantec:liveupdate_administrator:1.5.7.19
Symantec » Liveupdate Administrator » Version: 2.1.0

cpe:2.3:a:symantec:liveupdate_administrator:2.1.0
Symantec » Liveupdate Administrator » Version: 2.1.2

cpe:2.3:a:symantec:liveupdate_administrator:2.1.2
Symantec » Liveupdate Administrator » Version: 2.1.3

cpe:2.3:a:symantec:liveupdate_administrator:2.1.3
Symantec » Liveupdate Administrator » Version: 2.2.1

cpe:2.3:a:symantec:liveupdate_administrator:2.2.1
Symantec » Liveupdate Administrator » Version: 2.2.2

cpe:2.3:a:symantec:liveupdate_administrator:2.2.2
Symantec » Liveupdate Administrator » Version: 2.2.2.9

cpe:2.3:a:symantec:liveupdate_administrator:2.2.2.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-1524

Products

Pricing

Contact Us