CVE-2012-1062
Published Feb 14, 2012
Last updated 7 years ago
Overview
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the (1) period parameter to showHistoryData.do; (2) selectedNetwork, (3) network, or (4) group parameters to showresource.do; (5) header parameter to AlarmView.do; or (6) attName parameter to jsp/PopUp_Graph.jsp. NOTE: the Search.do/query vector is already covered by CVE-2008-1566, and the jsp/ThresholdActionConfiguration.jsp redirectto vector is already covered by CVE-2008-0474.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49E29074-F2FD-41CC-A6D0-6C8D4FEA1247"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A988BE5D-C923-4C9C-AE58-175BD91A5435"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:10.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19B623B5-561A-419E-BF64-0D7F783ED35B"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:10.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA192D05-A1F4-4B01-9E10-5B996DE20516"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBB09D35-D8A2-4C06-ACC3-1A7453E972DD"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "927040C8-9B49-4C2A-B712-2592DB10A375"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E9D7AE4-AD75-48FA-96F7-03ABD826C267"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "983B7128-1ED3-4AAB-9CAC-DE90FA04912A"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:9.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6702B909-BCA1-42D2-A565-821068349177"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:9.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CCB1BA82-CAEB-424A-9AFF-AE5E4CC8019F"
}
],
"operator": "OR"
}
]
}
]