exploitDog

CVE-2012-4543

Опубликовано: 06 дек. 2012

Источник: redhat

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL script, or (3) nonce variable to the profileProcess script.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=864397System: Multiple cross-site scripting flaws by displaying CRL or processing profile

EPSS

Процентиль: 47%

0.00238

Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2012-4543

nvd

больше 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL script, or (3) nonce variable to the profileProcess script.

GHSA-3rg2-g53j-xh7w

github

больше 3 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL script, or (3) nonce variable to the profileProcess script.

ELSA-2013-0511

oracle-oval

больше 12 лет назад

ELSA-2013-0511: pki-core security, bug fix and enhancement update (MODERATE)

EPSS

Процентиль: 47%

0.00238

Низкий

4.3 Medium

CVSS2