CVE-2011-4887
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX...
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
- Record
CVE-2011-4887- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
- Record
CVE-2011-4887- Updated
- 2026-11-02
EUVDEUVD-2011-4804 No score
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
- Record
EUVD-2011-4804- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f9xc-fpfx-m2x4 No score
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX...
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
- Record
GHSA-f9xc-fpfx-m2x4- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4887 is a medium vulnerability (CVSS 4.3) in Imperva Securesphere Web Application Firewall, published September 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.28%, the 70th percentile. No source names a fixed version.
References
secureworks.com/cyber-threat-intelligence/advisories/SWRX-2012-002
exchange.xforce.ibmcloud.com/vulnerabilities/73264
securityfocus.com/bid/52064
imperva.com/Services/adc_advisories_response_secureworks_CVE_2011_4887
osvdb.org/79338
secunia.com/advisories/48086
nvd.nist.gov/vuln/detail/CVE-2011-4887
github.com/advisories/GHSA-f9xc-fpfx-m2x4