CVE-2011-1976

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 20.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-08-10 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."

Affected products

Microsoft Report Viewer: 2005-sp1
Microsoft Visual Studio: 2005-sp1

References

http://marc.info/?l=bugtraq&m=145326307707460&w=2
http://www.securityfocus.com/bid/49033
http://www.us-cert.gov/cas/techalerts/TA11-221A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773
http://marc.info/?l=bugtraq&m=145326307707460&w=2
http://www.securityfocus.com/bid/49033
http://www.us-cert.gov/cas/techalerts/TA11-221A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773

Get alerted when CVE-2011-1976 or the next vulnerability affects your stack