Podatność CVE-2011-2461

Podatność CVE-2011-2461

Publikacja: 2011-12-01 Modyfikacja: 2012-02-13

Opis:

	Tytuł	Autor	Data
Low	Magento eCommerce Vulnerable Adobe Flex SDK	Paulos Yibelo	11.04.2015
Med.	Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass	Gjoko 'Liqu...	31.12.2016

Typ:

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
4.3/10	2.9/10	8.6/10

Affected software
Adobe -> Flex sdk

http://blog.mindedsecurity.com/2015/03/the-old-is-new-again-cve-2011-2461-is.html

http://blog.nibblesec.org/2015/03/the-old-is-new-again-cve-2011-2461-is.html

http://kb2.adobe.com/cps/915/cpsid_91544.html

http://packetstormsecurity.com/files/131376/Magento-eCommerce-Vulnerable-Adobe-Flex-SDK.html

http://www.adobe.com/support/security/bulletins/apsb11-25.html

https://threatpost.com/adobe-cve-2011-2461-remains-exploitable-four-years-after-patch/111754