{"api_version":"1","generated_at":"2026-07-23T12:43:28+00:00","cve":"CVE-2011-1524","urls":{"html":"https://cve.report/CVE-2011-1524","api":"https://cve.report/api/cve/CVE-2011-1524.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-1524","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-1524"},"summary":{"title":"CVE-2011-1524","description":"Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different vulnerability than CVE-2011-0545.","state":"PUBLISHED","assigner":"mitre","published_at":"2011-03-28 18:55:00","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/46856","name":"http://www.securityfocus.com/bid/46856","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Symantec LiveUpdate Administrator Management GUI HTML Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://sotiriu.de/adv/NSOADV-2011-001.txt","name":"http://sotiriu.de/adv/NSOADV-2011-001.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/8166","name":"http://securityreason.com/securityalert/8166","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Symantec LiveUpdate Administrator CSRF vulnerability - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1025242","name":"http://securitytracker.com/id?1025242","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Symantec LiveUpdate Administrator Input Validation Flaw Permits Cross-Site Request Forgery Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/517109/100/0/threaded","name":"http://www.securityfocus.com/archive/1/517109/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/66213","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/66213","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00","name":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Symantec LiveUpdate Administrator Cross-Site Request Forgery","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.exploit-db.com/exploits/17026","name":"http://www.exploit-db.com/exploits/17026","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Symantec LiveUpdate Administrator Management GUI HTML Injection","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2011/0727","name":"http://www.vupen.com/english/advisories/2011/0727","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1524","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1524","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"1524","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"liveupdate_administrator","cpe6":"2.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1524","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"liveupdate_administrator","cpe6":"2.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1524","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"liveupdate_administrator","cpe6":"2.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1524","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"liveupdate_administrator","cpe6":"2.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1524","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"liveupdate_administrator","cpe6":"2.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1524","vulnerable":"1","versionEndIncluding":"2.2.2.9","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"liveupdate_administrator","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T22:28:41.838Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"symantec-lua-gui-csrf(66213)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/66213"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://sotiriu.de/adv/NSOADV-2011-001.txt"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00"},{"name":"46856","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/46856"},{"name":"8166","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/8166"},{"name":"17026","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/17026"},{"name":"ADV-2011-0727","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2011/0727"},{"name":"1025242","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1025242"},{"name":"20110322 NSOADV-2011-001: Symantec LiveUpdate Administrator CSRF vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/517109/100/0/threaded"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-03-21T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different vulnerability than CVE-2011-0545."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-09T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"symantec-lua-gui-csrf(66213)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/66213"},{"tags":["x_refsource_MISC"],"url":"http://sotiriu.de/adv/NSOADV-2011-001.txt"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00"},{"name":"46856","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/46856"},{"name":"8166","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/8166"},{"name":"17026","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/17026"},{"name":"ADV-2011-0727","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2011/0727"},{"name":"1025242","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1025242"},{"name":"20110322 NSOADV-2011-001: Symantec LiveUpdate Administrator CSRF vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/517109/100/0/threaded"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2011-1524","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different vulnerability than CVE-2011-0545."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"symantec-lua-gui-csrf(66213)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/66213"},{"name":"http://sotiriu.de/adv/NSOADV-2011-001.txt","refsource":"MISC","url":"http://sotiriu.de/adv/NSOADV-2011-001.txt"},{"name":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00","refsource":"CONFIRM","url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00"},{"name":"46856","refsource":"BID","url":"http://www.securityfocus.com/bid/46856"},{"name":"8166","refsource":"SREASON","url":"http://securityreason.com/securityalert/8166"},{"name":"17026","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/17026"},{"name":"ADV-2011-0727","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2011/0727"},{"name":"1025242","refsource":"SECTRACK","url":"http://securitytracker.com/id?1025242"},{"name":"20110322 NSOADV-2011-001: Symantec LiveUpdate Administrator CSRF vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/517109/100/0/threaded"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2011-1524","datePublished":"2011-03-28T18:00:00.000Z","dateReserved":"2011-03-28T00:00:00.000Z","dateUpdated":"2024-08-06T22:28:41.838Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-03-28 18:55:00","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:liveupdate_administrator:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.2.9","matchCriteriaId":"FC041AE4-46DD-4234-8F42-3D20780E7628"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:liveupdate_administrator:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6C6436A5-ED76-4A14-B0B7-F34ED9A103B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:liveupdate_administrator:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B411C8E3-5C1E-4C05-85EB-27EDDF1BEEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:liveupdate_administrator:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C4DA63E2-6474-4DFC-B3D8-74164227385D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:liveupdate_administrator:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"20DC932C-BD80-43C0-A3F8-DC65F0EE1FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:liveupdate_administrator:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8C2DE1CE-8A1D-4BEB-86A2-EF5501789A97"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"1524","Ordinal":"1","Title":"CVE-2011-1524","CVE":"CVE-2011-1524","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"1524","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different vulnerability than CVE-2011-0545.","Type":"Description","Title":"CVE-2011-1524"},{"CveYear":"2011","CveId":"1524","Ordinal":"2","NoteData":"2011-03-28","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"1524","Ordinal":"3","NoteData":"2018-10-09","Type":"Other","Title":"Modified"}]}}}