CVE Feed

    Dashboard / CVE / CVE-2011-4237

    CVE-2011-4237

    CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu18693.

    Published:May 3, 2012
    Last Modified:Apr 11, 2025
    EPS:May 3, 2012
    EPSS Score:0.00276
    CVSS Score:4.3

    Affected Products

    Vendor
    Cisco
    Product
    Ciscoworks Common Services
    Vendor
    Cisco
    Product
    Prime Lan Management Solution

    Exploits

    No exploit reference

    Related CVEs

    CVE-2011-2042 (CVSS 5) — The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows r…
    CVE-2011-3310 (CVSS 9) — The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN M…
    CVE-2011-0966 (CVSS 6.8) — Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks C…
    CVE-2011-0961 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Comm…
    CVE-2010-3036 (CVSS 10) — Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Com…
    CVE-2009-1161 (CVSS 10) — Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through…
    CVE-2008-2054 (CVSS 9.3) — Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to e…
    CVE-2005-0356 (CVSS 5) — Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps optio…
    CVE-2004-0112 (CVSS 5) — The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not…
    CVE-2004-0081 (CVSS 5) — OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to c…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High