VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 5, 2011· Updated Apr 29, 2026

CVE-2011-0459

CVE-2011-0459

Description

Cross-site scripting (XSS) vulnerability in Cyber-Ark Password Vault Web Access (PVWA) 5.0 and earlier, 5.5 through 5.5 patch 4, and 6.0 through 6.0 patch 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

6
  • Cyber Ark/Password Vault Web Access6 versions
    cpe:2.3:a:cyber-ark:password_vault_web_access:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:cyber-ark:password_vault_web_access:*:*:*:*:*:*:*:*range: <=5.0
    • cpe:2.3:a:cyber-ark:password_vault_web_access:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cyber-ark:password_vault_web_access:5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:cyber-ark:password_vault_web_access:5.5:patch4:*:*:*:*:*:*
    • cpe:2.3:a:cyber-ark:password_vault_web_access:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cyber-ark:password_vault_web_access:6.0:patch2:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.