CVE-2011-3388 json
Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extende…
published 2011-09-06 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-3351
- cvss
- 4.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.3%
- EPSS 2.3% chance of exploitation in 30 days, percentile 83%
- public exploits
- 0
- none known
Summary
Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended Validation and loading content from trusted sources in an unspecified sequence that causes the address field and page information dialog to contain security information based on the trusted site, instead of the insecure site.
Exploit prediction
2.27% chance of exploitation in the next 30 days, higher than 83% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Classification
- Weakness
-
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
-
secunia.com
/advisories/45791
third-party-advisory, vendor-advisory
-
opera.com
/support/kb/view/1000/
vendor-advisory
-
securitytracker.com
/id?1025997
vdb-entry
-
securityfocus.com
/bid/49388
vdb-entry
-
osvdb.org
/74828
vdb-entry
- opera.com /docs/changelogs/windows/1151/
- opera.com /docs/changelogs/unix/1151/
- opera.com /docs/changelogs/mac/1151/
-
exchange.xforce.ibmcloud.com
/vulnerabilities/69515
vdb-entry
Sources
- CVE List CVE-2011-3388
- NVD CVE-2011-3388
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.