CVE-2011-2644

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.21%

Published

Aug 23, 2011

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an RPM info display.

Weaknesses (CWE)

CWE-79

Affected Products (2)

marcus_schafer · kiwivulnerable

novell · suse_studio_onsitevulnerable

References (10)

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html

http://support.novell.com/security/cve/CVE-2011-2644.html

http://www.securityfocus.com/bid/49236

https://bugzilla.novell.com/show_bug.cgi?id=700591

https://exchange.xforce.ibmcloud.com/vulnerabilities/69279

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html

http://support.novell.com/security/cve/CVE-2011-2644.html

http://www.securityfocus.com/bid/49236

https://bugzilla.novell.com/show_bug.cgi?id=700591

https://exchange.xforce.ibmcloud.com/vulnerabilities/69279

KEV Catalog EPSS Scores Vendors All CVEs