CVE-2012-2662

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-2662
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://osvdb.org/84099
http://rhn.redhat.com/errata/RHSA-2012-1103.html Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1347.html
http://secunia.com/advisories/50013 Vendor Advisory
http://www.securityfocus.com/bid/54608
http://www.securitytracker.com/id?1027284 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/77101
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:certificate_system:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:certificate_system:7.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:certificate_system:7.2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:certificate_system:7.3:*:*:*:*:*:*:*
cpe:2.3:a:redhat:certificate_system:8:*:*:*:*:*:*:*
cpe:2.3:a:redhat:certificate_system:8.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:dogtag_certificate_system:*:*:*:*:*:*:*:*
History

13 Feb 2023, 00:25

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2015:1347', 'name': 'https://access.redhat.com/errata/RHSA-2015:1347', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2012:1103', 'name': 'https://access.redhat.com/errata/RHSA-2012:1103', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=826646', 'name': 'https://bugzilla.redhat.com/show_bug.cgi?id=826646', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2012-2662', 'name': 'https://access.redhat.com/security/cve/CVE-2012-2662', 'tags': [], 'refsource': 'MISC'}
Summary Multiple cross-site scripting flaws were discovered in the Red Hat Certificate System Agent and End Entity pages. An attacker could use these flaws to perform a cross-site scripting (XSS) attack against victims using the Certificate System's web interface. Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.

02 Feb 2023, 15:15

Type Values Removed Values Added
Summary Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages. Multiple cross-site scripting flaws were discovered in the Red Hat Certificate System Agent and End Entity pages. An attacker could use these flaws to perform a cross-site scripting (XSS) attack against victims using the Certificate System's web interface.
References
  • (MISC) https://access.redhat.com/errata/RHSA-2015:1347 -
  • (MISC) https://access.redhat.com/errata/RHSA-2012:1103 -
  • (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=826646 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2012-2662 -
Information

Published : 2012-08-13 20:55

Updated : 2023-12-10 11:16

NVD link : CVE-2012-2662

Mitre link : CVE-2012-2662

CVE.ORG link : CVE-2012-2662

JSON object : View

Products Affected

redhat

  • certificate_system
  • dogtag_certificate_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')