CVE-2011-0552

Published: Oct 2, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the (1) refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the (2) nav or (3) menuitem parameter to IMManager/Admin/IMAdminTOC_simple.asp, or the (4) action parameter to IMManager/Admin/IMAdminEdituser.asp.

Affected (20)

Products: Symantec: Im Manager

Symantec

1 product

Im Manager

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Symantec Im Manager	Up to 8.4.17
Symantec Im Manager	Version 6.0
Symantec Im Manager	Version 6.5
Symantec Im Manager	Version 7.0
Symantec Im Manager	Version 7.5
Symantec Im Manager	Version 8.3
Symantec Im Manager	Version 8.4.0
Symantec Im Manager	Version 8.4.10
Symantec Im Manager	Version 8.4.11
Symantec Im Manager	Version 8.4.12
Symantec Im Manager	Version 8.4.13
Symantec Im Manager	Version 8.4.15
Symantec Im Manager	Version 8.4.16
Symantec Im Manager	Version 8.4.1
Symantec Im Manager	Version 8.4.2
Symantec Im Manager	Version 8.4.5
Symantec Im Manager	Version 8.4.6
Symantec Im Manager	Version 8.4.7
Symantec Im Manager	Version 8.4.8
Symantec Im Manager	Version 8.4.9