Search for vulnerabilities
Vulnerability details: VCID-ehy5-yxne-aaaq
Vulnerability ID VCID-ehy5-yxne-aaaq
Aliases CVE-2011-2369
Summary Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 4.0.1 allows remote attackers to inject arbitrary web script or HTML via an SVG element containing an HTML-encoded entity.
Status Published
Exploitability 0.5
Weighted Severity 3.9
Risk 1.9
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
System Score Found at
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00196 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00256 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
epss 0.00393 https://api.first.org/data/v1/epss?cve=CVE-2011-2369
cvssv2 4.3 https://nvd.nist.gov/vuln/detail/CVE-2011-2369
generic_textual none https://www.mozilla.org/en-US/security/advisories/mfsa2011-27
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
https://api.first.org/data/v1/epss?cve=CVE-2011-2369
https://bugzilla.mozilla.org/show_bug.cgi?id=650001
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14426
http://www.mozilla.org/security/announce/2011/mfsa2011-27.html
cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*
CVE-2011-2369 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2369
CVE-2011-2369 https://nvd.nist.gov/vuln/detail/CVE-2011-2369
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2011-27 https://www.mozilla.org/en-US/security/advisories/mfsa2011-27
USN-1157-1 https://usn.ubuntu.com/1157-1/
No exploits are available.
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2011-2369
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.57940
EPSS Score 0.00196
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.