CVE-2012-2161

published 2012-06-20

CVE-2012-2161: Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
ibm	security_appscan_source	—	—
ibm	security_appscan_source	—	—
ibm	security_appscan_source	—	—
ibm	security_appscan_source	—	—
ibm	security_appscan_source	—	—
ibm	security_appscan_source	—	—
ibm	spss_data_collection	—	—
ibm	spss_data_collection	—	—

CWE-79