CVE-2011-4038

Cross-site scripting (XSS) vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

• CWE-79

• http://secunia.com/advisories/47742Vendor Advisory
• http://secunia.com/advisories/47933Vendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-024-01.pdfUS Government Resource
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-039-01.pdfUS Government Resource
• http://secunia.com/advisories/47742Vendor Advisory
• http://secunia.com/advisories/47933Vendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-024-01.pdfUS Government Resource
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-039-01.pdfUS Government Resource

Published

Feb 10, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4031Integer underflow in the asfrtp_parse_packet function in lib…
• CVE-2011-4033Buffer overflow in the Steema TeeChart ActiveX control, as u…
• CVE-2011-4034Buffer overflow in the Steema TeeChart ActiveX control, as u…
• CVE-2011-4035Cross-site scripting (XSS) vulnerability in Schneider Electr…
• CVE-2011-4036Directory traversal vulnerability in Schneider Electric Vije…
• CVE-2011-4037Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 …
• CVE-2011-4039Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, a…
• CVE-2011-4040Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator…
• CVE-2011-4041webvrpcs.exe in Advantech/BroadWin WebAccess allows remote a…
• CVE-2011-4042An unspecified ActiveX control in SVUIGrd.ocx in ARC Informa…
• CVE-2011-4043Integer overflow in an unspecified ActiveX control in SVUIGr…
• CVE-2011-4044An unspecified ActiveX control in SVUIGrd.ocx in ARC Informa…