Vulnerabilities > EMC > Captiva Einput

DATE CVE VULNERABILITY TITLE RISK
2011-08-01 CVE-2011-1744 Permissions, Privileges, and Access Controls vulnerability in EMC Captiva Einput
EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions, which allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site.
network
emc CWE-264
5.8
2011-08-01 CVE-2011-1743 Cross-Site Scripting vulnerability in EMC Captiva Einput
Cross-site scripting (XSS) vulnerability in EMC Captiva eInput 2.1.1 before 2.1.1.37 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
emc CWE-79
4.3