QwikSec

Security Database

CVE

CWE

Training

CVE-2011-4035

Published: Dec 2, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

schneider-unspec-xss(71503)

vdb-entry

x_refsource_XF

http://www.scada.schneider-electric.com/sites/scada/en/login/historian-vulnerability.page

x_refsource_CONFIRM

http://www.us-cert.gov/control_systems/pdf/ICSA-11-307-01.pdf

x_refsource_MISC

http://www.citect.com/index.php?option=com_content&view=article&id=1656&Itemid=1695

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.