{"api_version":"1","generated_at":"2026-07-23T20:30:25+00:00","cve":"CVE-2011-0767","urls":{"html":"https://cve.report/CVE-2011-0767","api":"https://cve.report/api/cve/CVE-2011-0767.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-0767","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-0767"},"summary":{"title":"CVE-2011-0767","description":"Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759.","state":"PUBLISHED","assigner":"certcc","published_at":"2011-06-06 19:55:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.kb.cert.org/vuls/id/567774","name":"http://www.kb.cert.org/vuls/id/567774","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Vulnerability Note VU#567774 - Imperva SecureSphere management GUI contains an XSS vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67779","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67779","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.imperva.com/resources/adc/adc_advisories_response_secureworks.html","name":"http://www.imperva.com/resources/adc/adc_advisories_response_secureworks.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Imperva - Altogether Better","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.secureworks.com/research/advisories/SWRX-2011-001/","name":"http://www.secureworks.com/research/advisories/SWRX-2011-001/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Imperva SecureSphere Persistent Cross-Site Scripting Vulnerability | Dell SecureWorks","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/44772","name":"http://secunia.com/advisories/44772","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"SecureSphere Web Application Firewall Database Events Script Insertion Vulnerability - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-0767","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-0767","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"767","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"imperva","cpe5":"securesphere_web_application_firewall","cpe6":"6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"767","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"imperva","cpe5":"securesphere_web_application_firewall","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"767","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"imperva","cpe5":"securesphere_web_application_firewall","cpe6":"7.0.0.7061","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"767","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"imperva","cpe5":"securesphere_web_application_firewall","cpe6":"7.0.0.7078","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"767","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"imperva","cpe5":"securesphere_web_application_firewall","cpe6":"7.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"767","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"imperva","cpe5":"securesphere_web_application_firewall","cpe6":"8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"767","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"imperva","cpe5":"securesphere_web_application_firewall","cpe6":"8.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T22:05:53.534Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"44772","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/44772"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.secureworks.com/research/advisories/SWRX-2011-001/"},{"name":"securesphere-web-server-xss(67779)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67779"},{"name":"VU#567774","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/567774"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.imperva.com/resources/adc/adc_advisories_response_secureworks.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-05-23T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc"},"references":[{"name":"44772","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/44772"},{"tags":["x_refsource_MISC"],"url":"http://www.secureworks.com/research/advisories/SWRX-2011-001/"},{"name":"securesphere-web-server-xss(67779)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67779"},{"name":"VU#567774","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/567774"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.imperva.com/resources/adc/adc_advisories_response_secureworks.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cert@cert.org","ID":"CVE-2011-0767","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"44772","refsource":"SECUNIA","url":"http://secunia.com/advisories/44772"},{"name":"http://www.secureworks.com/research/advisories/SWRX-2011-001/","refsource":"MISC","url":"http://www.secureworks.com/research/advisories/SWRX-2011-001/"},{"name":"securesphere-web-server-xss(67779)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67779"},{"name":"VU#567774","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/567774"},{"name":"http://www.imperva.com/resources/adc/adc_advisories_response_secureworks.html","refsource":"CONFIRM","url":"http://www.imperva.com/resources/adc/adc_advisories_response_secureworks.html"}]}}}},"cveMetadata":{"assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","assignerShortName":"certcc","cveId":"CVE-2011-0767","datePublished":"2011-06-06T19:00:00.000Z","dateReserved":"2011-02-03T00:00:00.000Z","dateUpdated":"2024-08-06T22:05:53.534Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-06-06 19:55:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imperva:securesphere_web_application_firewall:6.2:*:*:*:*:*:*:*","matchCriteriaId":"51641749-DDD9-4744-BA7D-8B99B4BCC32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:imperva:securesphere_web_application_firewall:7.0:*:*:*:*:*:*:*","matchCriteriaId":"1467CB0D-598C-4582-AED6-233F73EB8378"},{"vulnerable":true,"criteria":"cpe:2.3:a:imperva:securesphere_web_application_firewall:7.0.0.7061:*:*:*:*:*:*:*","matchCriteriaId":"DD39B83F-25B7-4674-A4B8-7EBDCD3EC611"},{"vulnerable":true,"criteria":"cpe:2.3:a:imperva:securesphere_web_application_firewall:7.0.0.7078:*:*:*:*:*:*:*","matchCriteriaId":"F11F0459-AA27-4892-AA26-F2BCB7CB3B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:imperva:securesphere_web_application_firewall:7.5:*:*:*:*:*:*:*","matchCriteriaId":"327D03E6-1F83-4231-A110-26A3F72C9827"},{"vulnerable":true,"criteria":"cpe:2.3:a:imperva:securesphere_web_application_firewall:8.0:*:*:*:*:*:*:*","matchCriteriaId":"6DA8B34D-FF53-4391-BD0F-EC5FFB6DBDDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:imperva:securesphere_web_application_firewall:8.5:*:*:*:*:*:*:*","matchCriteriaId":"151D0049-15A0-4D1B-A6E8-52830618289B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"767","Ordinal":"1","Title":"CVE-2011-0767","CVE":"CVE-2011-0767","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"767","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759.","Type":"Description","Title":"CVE-2011-0767"},{"CveYear":"2011","CveId":"767","Ordinal":"2","NoteData":"2011-06-06","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"767","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}