Vulnerability record · CVE-2011-3310 · published 20 October 2011

CVE-2011-3310: Ciscoworks common services code injection vulnerability

Cisco · Ciscoworks Common Services

The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Monitor, Cisco Unified Operations Manager, CiscoWorks QoS Policy Manager, and CiscoWorks Voice Manager, allows remote authenticated users to execute arbitrary commands via a crafted URL, aka Bug IDs CSCtq48990, CSCtq63992, CSCtq64011, CSCtq64019, CSCtr23090, and CSCtt25535.

9.0 CVSS 2.0 High EPSS 15% · top 3.4% CWE-94 · Code injection

9.0CVSS 2.0 base score

15%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

8References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Ciscoworks Common Services Cisco

Windows Microsoft

References

Link	Tags
http://secunia.com/advisories/46533
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111019-cs	Vendor Advisory
http://www.securityfocus.com/bid/50284
https://exchange.xforce.ibmcloud.com/vulnerabilities/70759
http://secunia.com/advisories/46533
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111019-cs	Vendor Advisory
http://www.securityfocus.com/bid/50284
https://exchange.xforce.ibmcloud.com/vulnerabilities/70759

Track CVE-2011-3310 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2015-4716Owncloud path traversal vulnerabilityDirectory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows re…EPSS 25%21 Oct 2015 10.0CVE-2015-3076Adobe acrobat reader memory buffer overflow vulnerabilityAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial …EPSS 12%13 May 2015 10.0CVE-2015-3074Adobe acrobat improper access control vulnerabilityAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScrip…EPSS 9.9%13 May 2015 10.0CVE-2015-3075Adobe acrobat use after free vulnerabilityUse-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute …EPSS 9.3%13 May 2015 10.0CVE-2015-3073Adobe acrobat improper access control vulnerabilityAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScrip…EPSS 25%13 May 2015 10.0CVE-2015-3072Adobe acrobat improper access control vulnerabilityAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScrip…EPSS 9.9%13 May 2015 10.0CVE-2015-3071Adobe acrobat reader improper access control vulnerabilityAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScrip…EPSS 9.9%13 May 2015 10.0CVE-2015-3070Adobe acrobat reader memory buffer overflow vulnerabilityAdobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial …EPSS 12%13 May 2015

Source: NIST National Vulnerability Database (record CVE-2011-3310), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.