{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:12:31Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20110518-CVE-2011-0959","slug":"cisco-sa-20110518-cve-2011-0959","vendor":"Cisco","title":"Cisco Unified Operations Manager Multiple Cross-Site Scripting Vulnerabilities","summary":"Cisco Unified Operations Manager contains multiple cross-site scripting vulnerabilities that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input to certain scripts that make up the affected application.  An unauthenticated, remote attacker could exploit this vulnerability by convincing a user to view a malicious link.  If successful, the attacker could conduct cross-site scripting attacks and gain access to sensitive information. Exploit code is available. Cisco has confirmed this vulnerability and has released updated software. An attacker cannot directly exploit this vulnerability without user participation.  The attacker must convince the user to view a malicious link, likely provided in an e-mail or instant message. These vulnerabilities were discovered and reported to Cisco Systems by Brett Gervasoni of Sense of Security.","severity":"Medium","published_at":"2011-05-18T13:28:13Z","updated_at":"2011-05-18T13:28:13Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20110518-CVE-2011-0959","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20110518-CVE-2011-0959/csaf/Cisco-SA-20110518-CVE-2011-0959.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.21464},"cves":[{"id":"CVE-2011-0959","kev":false,"epss":{"score":0.21464,"percentile":0.97343,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Unified Operations Manager","slug":"cisco-unified-operations-manager","vendor":"Cisco"},"cve":{"id":"CVE-2011-0959"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:18:49Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified Operations Manager","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.21464,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2011-05-18T13:28:13Z","updated_at":"2011-05-18T13:28:13Z","advisory_updated_at":"2011-05-18T13:28:13Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20110518-CVE-2011-0959","row_display_order":1}]}