CVE-2011-4755: Parallels Plesk Small Business Panel 10.2.0 does not properly validate string data that is intended for sto...

Security readout for executives and security teams

Parallels Plesk Small Business Panel 10.2.0 mishandles cookie data before storing it in XML. A remote attacker could cause parsing failures and denial of service. The supplied sources also mention possible unspecified impact, but do not clarify scope, exploitability, or affected versions beyond 10.2.0. Exposure appears limited to environments still running Parallels Plesk Small Business Panel 10.2.0, especially if the panel is reachable from untrusted networks. The source bundle does not identify other affected versions or products. Treat this as a legacy exposure discovery item. It is not proven actively exploited in the supplied evidence, but any internet-facing 10.2.0 panel should be upgraded, isolated, or retired because the product is old and the impact includes service disruption. Mitigation focus: Inventory systems for Parallels Plesk Small Business Panel 10.2.0.; Check vendor guidance for fixed versions, upgrade paths, or retirement advice.; Restrict panel access to trusted administrative networks where possible..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.