CVE-2011-4237
Last modified
CVE-2011-4237 is a vulnerability of currently unknown severity. CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu18693.. EPSS estimates a 1.17% chance of exploitation in the next 30 days.
Description
CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu18693.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ciscoworks Common Services | 4.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-4237?
How severe is CVE-2011-4237?
How do I fix CVE-2011-4237?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-4220Investintech.com SlimPDF Reader does not properly restrict t…
- CVE-2011-4221Unspecified vulnerability in Investintech.com Able2Doc and A…
- CVE-2011-4222Unspecified vulnerability in Investintech.com Able2Extract a…
- CVE-2011-4223Unspecified vulnerability in Investintech.com Absolute PDF S…
- CVE-2011-4231Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as a…
- CVE-2011-4232The web server in Cisco Unified MeetingPlace 6.1 and 8.5 pro…
- CVE-2011-4244Heap-based buffer overflow in the RealVideo renderer in Real…
- CVE-2011-4245The RealVideo renderer in RealNetworks RealPlayer before 15.…
- CVE-2011-4246The AAC codec in RealNetworks RealPlayer before 15.0.0 and M…
- CVE-2011-4247RealNetworks RealPlayer before 15.0.0 allows remote attacker…
- CVE-2011-4248RealNetworks RealPlayer before 15.0.0 allows remote attacker…
- CVE-2011-4249Array index error in the RV30 codec in RealNetworks RealPlay…
Are you affected by CVE-2011-4237?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST