VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 9, 2011· Updated Jun 16, 2026

CVE-2011-2224

CVE-2011-2224

Description

The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Novell/Data Synchronizer5 versions
    cpe:2.3:a:novell:data_synchronizer:1.0.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:novell:data_synchronizer:1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:data_synchronizer:1.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:data_synchronizer:1.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:data_synchronizer:1.1.2:*:*:*:*:*:*:*
    • (no CPE)range: >=1.0, <=1.1.2 build 428
  • Novell/Mobility Pack4 versions
    cpe:2.3:a:novell:mobility_pack:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:novell:mobility_pack:*:*:*:*:*:*:*:*range: <=1.1.2
    • cpe:2.3:a:novell:mobility_pack:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:mobility_pack:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:mobility_pack:1.1.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.