{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:40:39Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20110518-CVE-2011-0962","slug":"cisco-sa-20110518-cve-2011-0962","vendor":"Cisco","title":"Cisco Unified Operations Manager Common Services Device Center Cross-Site Scripting Vulnerability","summary":"Cisco Unified Operations Manager contains a cross-site scripting vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of user input supplied to the Common Services Device Center component used by the affected application.  An unauthenticated, remote attacker could exploit this vulnerability by convincing a user to view a malicious link.  If successful, the attacker could conduct cross-site scripting attacks and access sensitive information. Exploit code is available. Cisco has confirmed this vulnerability; however, software updates are not available. An attacker cannot directly exploit this vulnerability and instead must rely on user participation to accomplish an exploit.  The attacker must convince a user to view a malicious link.  The attacker may provide links to users in e-mail or instant messages or by posting links to public websites.  When followed, the malicious link may trigger the vulnerability and allow the attacker to access sensitive information that may include user credentials.  Attackers could use the information gained from the attack to launch further attacks against a targeted system. This vulnerability was discovered and reported to Cisco Systems by Brett Gervasoni of Sense of Security.","severity":"Medium","published_at":"2011-05-18T13:16:29Z","updated_at":"2011-05-18T13:16:29Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20110518-CVE-2011-0962","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20110518-CVE-2011-0962/csaf/Cisco-SA-20110518-CVE-2011-0962.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.04654},"cves":[{"id":"CVE-2011-0962","kev":false,"epss":{"score":0.04654,"percentile":0.90735,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Unified Operations Manager","slug":"cisco-unified-operations-manager","vendor":"Cisco"},"cve":{"id":"CVE-2011-0962"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:18:50Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified Operations Manager","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.04654,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2011-05-18T13:16:29Z","updated_at":"2011-05-18T13:16:29Z","advisory_updated_at":"2011-05-18T13:16:29Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20110518-CVE-2011-0962","row_display_order":1}]}