# CVEs published 2012-01-03

7 CVEs were published on January 3, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-4197](https://cve.now/CVE-2011-4197.md): etc/inc/certs.inc in the PKI implementation in pfSense before 2.0.1 creates each X.509 certificate with a true value for the CA basic constr (no CVSS)
- [CVE-2011-5047](https://cve.now/CVE-2011-5047.md): Cross-site scripting (XSS) vulnerability in status\_rrd\_graph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2011-5048](https://cve.now/CVE-2011-5048.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM Web Experience Factory (aka WEF, formerly WebSphere Portlet Factory) 7.0 and 7.0. (no CVSS)
- [CVE-2011-4642](https://cve.now/CVE-2011-4642.md): mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allo (no CVSS)
- [CVE-2011-4643](https://cve.now/CVE-2011-4643.md): Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (no CVSS)
- [CVE-2011-4644](https://cve.now/CVE-2011-4644.md): Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentio (no CVSS)
- [CVE-2011-4778](https://cve.now/CVE-2011-4778.md): Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.2.x before 4.2.5 allows remote attackers to inject arbitrary web script o (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-01-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.