VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 5, 2011· Updated Jun 16, 2026

CVE-2011-0459

CVE-2011-0459

Description

Cross-site scripting (XSS) vulnerability in Cyber-Ark Password Vault Web Access (PVWA) 5.0 and earlier, 5.5 through 5.5 patch 4, and 6.0 through 6.0 patch 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Cyber Ark/Password Vault Web Access7 versions
    cpe:2.3:a:cyber-ark:password_vault_web_access:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:cyber-ark:password_vault_web_access:*:*:*:*:*:*:*:*range: <=5.0
    • cpe:2.3:a:cyber-ark:password_vault_web_access:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cyber-ark:password_vault_web_access:5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:cyber-ark:password_vault_web_access:5.5:patch4:*:*:*:*:*:*
    • cpe:2.3:a:cyber-ark:password_vault_web_access:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cyber-ark:password_vault_web_access:6.0:patch2:*:*:*:*:*:*
    • (no CPE)range: <=5.0, 5.5-5.5 patch 4, 6.0-6.0 patch 2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.