CVEvulnerability
CVE-2012-0414
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Spacewalk service in SUSE Manager 1.2 for SUSE Linux Enterprise (SLE) 11 SP1 allows remote attackers to inject arbitrary web script or HTML via an image name.
Affected configurations
• novell suse manager 1.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5145796.html support.novell.com
- https://bugzilla.novell.com/show_bug.cgi?id=761165 bugzilla.novell.com
- https://support.novell.com/security/cve/CVE-2012-0414.html Vendor Advisory
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5145796.html support.novell.com
- https://bugzilla.novell.com/show_bug.cgi?id=761165 bugzilla.novell.com
- https://support.novell.com/security/cve/CVE-2012-0414.html Vendor Advisory