CVE-2011-4887
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX...
CVE-2011-4887 is a medium vulnerability (CVSS 4.3) in Imperva Securesphere Web Application Firewall, published September 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.28%, the 70th percentile. No source names a fixed version.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 1.28%EPSS, 70th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
- Record
CVE-2011-4887- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE ListNo score
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
- Record
CVE-2011-4887- Updated
- 2026-11-02
EUVDEUVD-2011-4804No score
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
- Record
EUVD-2011-4804- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f9xc-fpfx-m2x4No score
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX...
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
- Record
GHSA-f9xc-fpfx-m2x4- Weakness
- CWE-79
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secureworks.com/cyber-threat-intelligence/advisories/SWRX-2012-002
exchange.xforce.ibmcloud.com/vulnerabilities/73264
securityfocus.com/bid/52064
imperva.com/Services/adc_advisories_response_secureworks_CVE_2011_4887
osvdb.org/79338
secunia.com/advisories/48086
nvd.nist.gov/vuln/detail/CVE-2011-4887
github.com/advisories/GHSA-f9xc-fpfx-m2x4