Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:empathy:3.2.0.1:*:*:*:*:*:*:*

part: a version: 3.2.0.1 update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductEmpathy (bbea85f3-7158-58f2-afea-60a211243ab2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/kenvandine/empathy purl2cpe 2026-06-01 10:17:24.421970

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4170 vulnerable 2026-06-03 14:31:23.426359 Details available
Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias (aka nickname) in a /me event, a different vulnerability than CVE-2011-3635.
Published: 2011-10-23T10:00:00.000Z
Updated: 2024-09-16T20:41:49.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3635 vulnerable 2026-06-03 14:31:20.903190 Details available
Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias (aka nickname).
Published: 2011-10-23T10:00:00.000Z
Updated: 2024-08-06T23:37:48.681Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.