CVEvulnerability
CVE-2012-0309
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-01-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• cogentdatahub cascade datahub (<= 6.4.20)
• cogentdatahub cogent datahub (<= 7.1.2)
• cogentdatahub cogent datahub 7.0
• cogentdatahub cogent datahub 7.0.2
• cogentdatahub cogent datahub 7.1.0
• cogentdatahub cogent datahub 7.1.1
• cogentdatahub cogent datahub 7.1.1.63
• cogentdatahub opc datahub (<= 6.4.20)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvn.jp/en/jp/JVN12983784/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000001 jvndb.jvn.jp
- http://secunia.com/advisories/47496 secunia.com
- http://secunia.com/advisories/47525 secunia.com
- http://www.cogentdatahub.com/ReleaseNotes.html www.cogentdatahub.com
- http://www.securityfocus.com/bid/51375 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-016-01.pdf www.us-cert.gov
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72305 exchange.xforce.ibmcloud.com
- http://jvn.jp/en/jp/JVN12983784/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000001 jvndb.jvn.jp
- http://secunia.com/advisories/47496 secunia.com
- http://secunia.com/advisories/47525 secunia.com
- http://www.cogentdatahub.com/ReleaseNotes.html www.cogentdatahub.com
- http://www.securityfocus.com/bid/51375 www.securityfocus.com
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-016-01.pdf www.us-cert.gov
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72305 exchange.xforce.ibmcloud.com