CVEvulnerability
CVE-2012-1892
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."
Affected configurations
• microsoft visual studio team foundation server 2010
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/50463 secunia.com
- http://www.securityfocus.com/bid/55409 www.securityfocus.com
- http://www.securitytracker.com/id?1027511 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA12-255A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-061 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15779 oval.cisecurity.org
- http://secunia.com/advisories/50463 secunia.com
- http://www.securityfocus.com/bid/55409 www.securityfocus.com
- http://www.securitytracker.com/id?1027511 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA12-255A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-061 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15779 oval.cisecurity.org