Home

CVE-2012-1892

Description

Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka XSS Vulnerability.

Risk Information

Base Score
7.1
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
EPSS Score
Exploitation Probability
44.933

Associated Vulnerability

VulnerabilityOS Platform
ms12-061:vulnerability in visual studio team foundation server could allow elevation of privilege: september 11, 2012 for Microsoft Visual Studio 2010 Service Pack 1 TFS Web Access (KB2719584)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-12415Security Update for Microsoft Visual Studio 2010 Service Pack 1 TFS Web Access (KB2719584)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234