« Volver al listado

CVE-2011-5114

Estado: ModificadaMedia (4.3)—

Multiple cross-site scripting (XSS) vulnerabilities in the Authoritative DNS - DNS Zones page in Barracuda Link Balancer 330 Firmware 1.3.2.005 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) zoneid or (2) scope parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Barraguard — Barracuda Link Balancer Series Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-5114",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-08-23T20:55:03.657",
  "references": [
    {
      "url": "http://www.securitytracker.com/id?1026283",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vulnerability-lab.com/get_content.php?id=33",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1026283",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vulnerability-lab.com/get_content.php?id=33",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple cross-site scripting (XSS) vulnerabilities in the Authoritative DNS - DNS Zones page in Barracuda Link Balancer 330 Firmware 1.3.2.005 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) zoneid or (2) scope parameter."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en la página de Authoritative DNS - DNS Zones en el firmware v1.3.2.005 de Barracuda Link Balancer 330 y anteriores, que permite a atacantes remotos inyectar código web o HTML arbitrario a través del parámetro (1) zoneid o (2) scope."
    }
  ],
  "lastModified": "2026-06-16T23:35:58.500",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:barraguard:barracuda_link_balancer_series_firmware:1.3.2.005:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1DB62106-B58F-434D-B603-73211656444E"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:barraguard:barracuda_link_balancer:330:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "926793FB-EEF1-41E5-A01B-0C958281AD2A"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}