CVE-2012-2662

CWE-79 — Cross-site Scripting (XSS)5 documents5 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 53.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Redhat Certificate System
Timeline
PublishedAug 13
Latest updateMay 17

Description

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-4x57-6h7g-39hp: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8↗2022-05-17
▶
CVEList
CVE-2012-2662: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8↗2012-08-13
▶

📋Vendor Advisories

1
Red Hat
System: multiple XSS flaws↗2012-07-19
▶

💬Community

1
Bugzilla
CVE-2012-2662 Certificate System: multiple XSS flaws↗2012-05-30
▶