4.3

CVE-2011-2609

Opera before 11.50 does not properly restrict data: URIs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
OperaOpera Browser Updatebeta Version <= 11.50
OperaOpera Browser Version5.0
OperaOpera Browser Version5.0 Updatebeta2
OperaOpera Browser Version5.0 Updatebeta3
OperaOpera Browser Version5.0 Updatebeta4
OperaOpera Browser Version5.0 Updatebeta5
OperaOpera Browser Version5.0 Updatebeta6
OperaOpera Browser Version5.0 Updatebeta7
OperaOpera Browser Version5.0 Updatebeta8
OperaOpera Browser Version5.02
OperaOpera Browser Version5.10
OperaOpera Browser Version5.11
OperaOpera Browser Version5.12
OperaOpera Browser Version6.0
OperaOpera Browser Version6.0 Updatebeta1
OperaOpera Browser Version6.0 Updatebeta2
OperaOpera Browser Version6.0 Updatetp1
OperaOpera Browser Version6.0 Updatetp2
OperaOpera Browser Version6.0 Updatetp3
OperaOpera Browser Version6.1
OperaOpera Browser Version6.01
OperaOpera Browser Version6.1 Updatebeta1
OperaOpera Browser Version6.02
OperaOpera Browser Version6.03
OperaOpera Browser Version6.04
OperaOpera Browser Version6.05
OperaOpera Browser Version6.06
OperaOpera Browser Version6.11
OperaOpera Browser Version6.12
OperaOpera Browser Version7.0
OperaOpera Browser Version7.0 Updatebeta1
OperaOpera Browser Version7.0 Updatebeta1_v2
OperaOpera Browser Version7.0 Updatebeta2
OperaOpera Browser Version7.01
OperaOpera Browser Version7.02
OperaOpera Browser Version7.03
OperaOpera Browser Version7.10
OperaOpera Browser Version7.10 Updatebeta1
OperaOpera Browser Version7.11
OperaOpera Browser Version7.11 Updatebeta2
OperaOpera Browser Version7.20
OperaOpera Browser Version7.20 Updatebeta7
OperaOpera Browser Version7.21
OperaOpera Browser Version7.22
OperaOpera Browser Version7.23
OperaOpera Browser Version7.50
OperaOpera Browser Version7.50 Updatebeta1
OperaOpera Browser Version7.51
OperaOpera Browser Version7.52
OperaOpera Browser Version7.53
OperaOpera Browser Version7.54
OperaOpera Browser Version7.54 Updateupdate1
OperaOpera Browser Version7.54 Updateupdate2
OperaOpera Browser Version7.60
OperaOpera Browser Version8.0
OperaOpera Browser Version8.0 Updatebeta1
OperaOpera Browser Version8.0 Updatebeta2
OperaOpera Browser Version8.0 Updatebeta3
OperaOpera Browser Version8.01
OperaOpera Browser Version8.02
OperaOpera Browser Version8.50
OperaOpera Browser Version8.51
OperaOpera Browser Version8.52
OperaOpera Browser Version8.53
OperaOpera Browser Version8.54
OperaOpera Browser Version9.0
OperaOpera Browser Version9.0 Updatebeta1
OperaOpera Browser Version9.0 Updatebeta2
OperaOpera Browser Version9.01
OperaOpera Browser Version9.02
OperaOpera Browser Version9.10
OperaOpera Browser Version9.12
OperaOpera Browser Version9.20
OperaOpera Browser Version9.20 Updatebeta1
OperaOpera Browser Version9.21
OperaOpera Browser Version9.22
OperaOpera Browser Version9.23
OperaOpera Browser Version9.24
OperaOpera Browser Version9.25
OperaOpera Browser Version9.26
OperaOpera Browser Version9.27
OperaOpera Browser Version9.50
OperaOpera Browser Version9.50 Updatebeta1
OperaOpera Browser Version9.50 Updatebeta2
OperaOpera Browser Version9.51
OperaOpera Browser Version9.52
OperaOpera Browser Version9.60
OperaOpera Browser Version9.60 Updatebeta1
OperaOpera Browser Version9.61
OperaOpera Browser Version9.62
OperaOpera Browser Version9.63
OperaOpera Browser Version9.64
OperaOpera Browser Version10.00
OperaOpera Browser Version10.00 Updatebeta1
OperaOpera Browser Version10.00 Updatebeta2
OperaOpera Browser Version10.00 Updatebeta3
OperaOpera Browser Version10.01
OperaOpera Browser Version10.10
OperaOpera Browser Version10.10 Updatebeta1
OperaOpera Browser Version10.50
OperaOpera Browser Version10.50 Updatebeta1
OperaOpera Browser Version10.50 Updatebeta2
OperaOpera Browser Version10.51
OperaOpera Browser Version10.52
OperaOpera Browser Version10.53
OperaOpera Browser Version10.53 Updateb
OperaOpera Browser Version10.54
OperaOpera Browser Version10.60
OperaOpera Browser Version10.60 Updatebeta1
OperaOpera Browser Version10.61
OperaOpera Browser Version10.62
OperaOpera Browser Version10.63
OperaOpera Browser Version11.00
OperaOpera Browser Version11.00 Updatealpha
OperaOpera Browser Version11.00 Updatebeta
OperaOpera Browser Version11.01
OperaOpera Browser Version11.10
OperaOpera Browser Version11.10 Updatealpha
OperaOpera Browser Version11.10 Updatebeta
OperaOpera Browser Version11.11
OperaOpera Browser Version11.50 Updatealpha
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.637
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.