CVE-2011-0767

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-06-06 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759.

Affected products

Imperva Securesphere Web Application Firewall: 6.2, 7.0, 7.0.0.7061, 7.0.0.7078, 7.5, 8.0 (+1)

References

http://secunia.com/advisories/44772
http://www.imperva.com/resources/adc/adc_advisories_response_secureworks.html
http://www.kb.cert.org/vuls/id/567774
http://www.secureworks.com/research/advisories/SWRX-2011-001/
https://exchange.xforce.ibmcloud.com/vulnerabilities/67779
http://secunia.com/advisories/44772
http://www.imperva.com/resources/adc/adc_advisories_response_secureworks.html
http://www.kb.cert.org/vuls/id/567774
http://www.secureworks.com/research/advisories/SWRX-2011-001/
https://exchange.xforce.ibmcloud.com/vulnerabilities/67779

Get alerted when CVE-2011-0767 or the next vulnerability affects your stack