CVE-2011-1360

Published: Oct 28, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in (1) manual/ibm/ and (2) htdocs/*/manual/ibm/.

Affected (20)

Products: Ibm: Http Server

Ibm

1 product

Http Server

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Ibm Http Server	Up to 2.0.47
Ibm Http Server	Version 1.0
Ibm Http Server	Version 1.3.12.2
Ibm Http Server	Version 1.3.12.6
Ibm Http Server	Version 1.3.12.7
Ibm Http Server	Version 1.3.12
Ibm Http Server	Version 1.3.19.4
Ibm Http Server	Version 1.3.19.5
Ibm Http Server	Version 1.3.19.6
Ibm Http Server	Version 1.3.19
Ibm Http Server	Version 1.3.26.1
Ibm Http Server	Version 1.3.26.2
Ibm Http Server	Version 1.3.26
Ibm Http Server	Version 1.3.28.1
Ibm Http Server	Version 1.3.28
Ibm Http Server	Version 1.3.6.3
Ibm Http Server	Version 2.0.42.1
Ibm Http Server	Version 2.0.42.2
Ibm Http Server	Version 2.0.42
Ibm Http Server	Version 2.0