CVE-2011-1976 — Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."

Published Aug 10, 2011

4.3

MEDIUM

CVSS 2.0

EPSS 20.81%

Description

Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Metrics

20.81% 0.20808

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.20808

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (21 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	20.81% (0.20808)	97.48th	v5 (v2026.06.15)
Jun 15, 2026	20.81% (0.20808)	97.22th	v5 (v2026.06.15)
Oct 18, 2025	65.71% (0.65713)	98.41th	v4 (v2025.03.14)
Sep 14, 2025	77.27% (0.77273)	98.94th	v4 (v2025.03.14)
Mar 30, 2025	79.01% (0.79010)	99.00th	v4 (v2025.03.14)
Mar 29, 2025	76.74% (0.76742)	98.63th	v4 (v2025.03.14)
Mar 17, 2025	78.55% (0.78548)	98.99th	v4 (v2025.03.14)
Dec 12, 2024	92.71% (0.92707)	99.13th	v3 (v2023.03.01)
Mar 30, 2024	92.71% (0.92707)	98.96th	v3 (v2023.03.01)
Feb 8, 2024	91.66% (0.91663)	98.81th	v3 (v2023.03.01)
Dec 17, 2023	95.88% (0.95875)	99.31th	v3 (v2023.03.01)
Oct 23, 2023	95.98% (0.95979)	99.28th	v3 (v2023.03.01)
Aug 29, 2023	95.55% (0.95553)	99.13th	v3 (v2023.03.01)
Jul 6, 2023	95.30% (0.95298)	99.02th	v3 (v2023.03.01)
May 9, 2023	96.60% (0.96603)	99.37th	v3 (v2023.03.01)
Mar 10, 2023	96.75% (0.96747)	99.39th	v3 (v2023.03.01)
Mar 7, 2023	96.81% (0.96814)	99.42th	v3 (v2023.03.01)
Mar 6, 2023	18.52% (0.18518)	96.33th	v2 (v2022.01.01)
Jul 13, 2022	18.52% (0.18518)	96.09th	v2 (v2022.01.01)
May 6, 2022	22.43% (0.22433)	96.37th	v2 (v2022.01.01)
Feb 4, 2022	22.43% (0.22433)	94.37th	v2 (v2022.01.01)

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

http://marc.info/?l=bugtraq&m=145326307707460&w=2
vendor-advisoryx_refsource_HPThird Party Advisory
http://www.securityfocus.com/bid/49033
vdb-entryx_refsource_BID
http://www.us-cert.gov/cas/techalerts/TA11-221A.html
third-party-advisoryx_refsource_CERTThird Party AdvisoryUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067
vendor-advisoryx_refsource_MS
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270
x_refsource_CONFIRMThird Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=145326307707460&w=2		vendor-advisoryx_refsource_HPThird Party Advisory
http://www.securityfocus.com/bid/49033		vdb-entryx_refsource_BID
http://www.us-cert.gov/cas/techalerts/TA11-221A.html		third-party-advisoryx_refsource_CERTThird Party AdvisoryUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-067		vendor-advisoryx_refsource_MS
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04945270		x_refsource_CONFIRMThird Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12773		vdb-entrysignaturex_refsource_OVAL