VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 2, 2011· Updated Jun 16, 2026

CVE-2011-3320

CVE-2011-3320

Description

Cross-site scripting (XSS) vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Affected products

4
  • Ge/Intelligent Platforms Proficy Historian3 versions
    cpe:2.3:a:ge:intelligent_platforms_proficy_historian:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ge:intelligent_platforms_proficy_historian:*:*:*:*:*:*:*:*range: <=4.0
    • cpe:2.3:a:ge:intelligent_platforms_proficy_historian:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ge:intelligent_platforms_proficy_historian:3.5:*:*:*:*:*:*:*
  • GE Intelligent Platforms/Proficy Historianllm-fuzzy
    Range: <=4.x

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.