CVE-2011-4038 | BDVDB-2026-49103 Detail

Description#

Cross-site scripting (XSS) vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.us-cert.gov/control_systems/pdf/ICSA-12-024-01.pdf
http://www.us-cert.gov/control_systems/pdf/ICSA-12-039-01.pdf
http://secunia.com/advisories/47742
http://secunia.com/advisories/47933

Exploit#

No public exploit known

History#

Version 12012-02-10Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.