CVE-2011-1102

Published: Feb 25, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (13)

Products: F Secure: Policy Manager

F Secure

1 product

Policy Manager

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
F Secure Policy Manager	Version 7.00
F Secure Policy Manager	Version 8.00 hotfix1
F Secure Policy Manager	Version 8.10 hotfix1
F Secure Policy Manager	Version 8.10 hotfix2
F Secure Policy Manager	Version 8.11 hotfix1
F Secure Policy Manager	Version 8.11 hotfix2
F Secure Policy Manager	Version 9.00 hotfix1
F Secure Policy Manager	Version 9.00 hotfix2
F Secure Policy Manager	Version 9.00 hotfix3

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
F Secure Policy Manager	Version 8.00 hotfix1
F Secure Policy Manager	Version 8.10 hotfix1
F Secure Policy Manager	Version 8.11 hotfix1
F Secure Policy Manager	Version 9.00 hotfix1