CVEvulnerability
CVE-2012-2662
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-08-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
Affected configurations
• redhat certificate system (<= 8.1)
• redhat certificate system 7.1
• redhat certificate system 7.2
• redhat certificate system 7.3
• redhat certificate system 8
• redhat certificate system 8.0
• redhat dogtag certificate system
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/84099 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2012-1103.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1347.html rhn.redhat.com
- http://secunia.com/advisories/50013 Vendor Advisory
- http://www.securityfocus.com/bid/54608 www.securityfocus.com
- http://www.securitytracker.com/id?1027284 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77101 exchange.xforce.ibmcloud.com
- http://osvdb.org/84099 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2012-1103.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1347.html rhn.redhat.com
- http://secunia.com/advisories/50013 Vendor Advisory
- http://www.securityfocus.com/bid/54608 www.securityfocus.com
- http://www.securitytracker.com/id?1027284 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77101 exchange.xforce.ibmcloud.com