CVE-2012-2662

Description

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.

Risk Information

Base Score
6.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.238

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-ca-9.0.3-43.el6.noarch.rpmLinux
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-common-9.0.3-43.el6.noarch.rpmLinux
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-common-javadoc-9.0.3-43.el6.noarch.rpmLinux
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-java-tools-9.0.3-43.el6.noarch.rpmLinux
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-java-tools-javadoc-9.0.3-43.el6.noarch.rpmLinux
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-native-tools-9.0.3-43.el6.i686.rpmLinux
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-native-tools-9.0.3-43.el6.x86_64.rpmLinux
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-selinux-9.0.3-43.el6.noarch.rpmLinux
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-setup-9.0.3-43.el6.noarch.rpmLinux
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-silent-9.0.3-43.el6.noarch.rpmLinux
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-symkey-9.0.3-43.el6.i686.rpmLinux
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-symkey-9.0.3-43.el6.x86_64.rpmLinux
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-util-9.0.3-43.el6.noarch.rpmLinux
(RHSA-2015:1347) Moderate: pki-core security and bug fix update pki-util-javadoc-9.0.3-43.el6.noarch.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234