CVE-2011-0459

Published: Oct 5, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Cyber-Ark Password Vault Web Access (PVWA) 5.0 and earlier, 5.5 through 5.5 patch 4, and 6.0 through 6.0 patch 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (6)

Products: Cyber Ark: Password Vault Web Access

Cyber Ark

1 product

Password Vault Web Access

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Cyber Ark Password Vault Web Access	Up to 5.0
Cyber Ark Password Vault Web Access	Version 4.0
Cyber Ark Password Vault Web Access	Version 5.5
Cyber Ark Password Vault Web Access	Version 5.5 patch4
Cyber Ark Password Vault Web Access	Version 6.0
Cyber Ark Password Vault Web Access	Version 6.0 patch2