This application requires Javascript for optimal performance.

HTTP.URI.XSS

Release Date

Dec 22, 2011

Severity

medium

Impact

Remote attackers can execute arbitrary code or gain sensitive information.

Description

This indicates an attempt to exploit a Cross Site Scripting vulnerability.

Cross-site scripting (XSS) is a popular web security issue. If a web application doesn't properly validate input from one user and uses it in the output for other users, attackers can exploit it to send malicious code to other users.

Affected Products

All web application environments are susceptible to cross-site scripting.

Recommended Actions

Review the code of web application and check all places where user input could possibly become part of the output for other users.

Coverage

IPS
VCM

Reference/s

http://cwe.mitre.org/data/definitions/79.html

Reference: VID-30352