CVEvulnerability
CVE-2012-4950
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-11-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly handled during construction of error messages.
Affected configurations
• patterninsight pattern insight 2.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/87053 osvdb.org
- http://secunia.com/advisories/51203 secunia.com
- http://www.kb.cert.org/vuls/id/802596 US Government Resource
- http://www.securityfocus.com/bid/56381 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79787 exchange.xforce.ibmcloud.com
- http://osvdb.org/87053 osvdb.org
- http://secunia.com/advisories/51203 secunia.com
- http://www.kb.cert.org/vuls/id/802596 US Government Resource
- http://www.securityfocus.com/bid/56381 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79787 exchange.xforce.ibmcloud.com