CVE-2011-1423

https://notcve.org/view.php?id=CVE-2011-1423

Cross-site scripting (XSS) vulnerability in RSA Data Loss Prevention (DLP) Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en RSA Data Loss Prevention (DLP) Enterprise Manager 8.x anteriores a 8.5 SP1. Permite a usuarios remotos inyectar codigo de script web o código HTML de su elección a través de vectores sin especificar. • http://securityreason.com/securityalert/8242 http://www.securityfocus.com/archive/1/517763/100/0/threaded http://www.securityfocus.com/bid/47642 https://exchange.xforce.ibmcloud.com/vulnerabilities/67210 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •