Lucene search

K
cve[email protected]CVE-2012-0325
HistoryMar 09, 2012 - 11:55 a.m.

CVE-2012-0325

2012-03-0911:55:01
CWE-79
web.nvd.nist.gov
25
jenkins
cve-2012-0325
cross-site scripting
xss
vulnerability
nvd
security

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%

Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0324.

Affected configurations

NVD
Node
cloudbeesjenkinsRange1.453
OR
jenkinsjenkinsMatch1.301
OR
jenkinsjenkinsMatch1.302
OR
jenkinsjenkinsMatch1.303
OR
jenkinsjenkinsMatch1.304
OR
jenkinsjenkinsMatch1.305
OR
jenkinsjenkinsMatch1.306
OR
jenkinsjenkinsMatch1.307
OR
jenkinsjenkinsMatch1.308
OR
jenkinsjenkinsMatch1.309
OR
jenkinsjenkinsMatch1.310
OR
jenkinsjenkinsMatch1.311
OR
jenkinsjenkinsMatch1.312
OR
jenkinsjenkinsMatch1.313
OR
jenkinsjenkinsMatch1.314
OR
jenkinsjenkinsMatch1.315
OR
jenkinsjenkinsMatch1.316
OR
jenkinsjenkinsMatch1.317
OR
jenkinsjenkinsMatch1.318
OR
jenkinsjenkinsMatch1.319
OR
jenkinsjenkinsMatch1.320
OR
jenkinsjenkinsMatch1.321
OR
jenkinsjenkinsMatch1.322
OR
jenkinsjenkinsMatch1.323
OR
jenkinsjenkinsMatch1.324
OR
jenkinsjenkinsMatch1.325
OR
jenkinsjenkinsMatch1.326
OR
jenkinsjenkinsMatch1.327
OR
jenkinsjenkinsMatch1.328
OR
jenkinsjenkinsMatch1.329
OR
jenkinsjenkinsMatch1.330
OR
jenkinsjenkinsMatch1.331
OR
jenkinsjenkinsMatch1.332
OR
jenkinsjenkinsMatch1.333
OR
jenkinsjenkinsMatch1.334
OR
jenkinsjenkinsMatch1.335
OR
jenkinsjenkinsMatch1.336
OR
jenkinsjenkinsMatch1.337
OR
jenkinsjenkinsMatch1.338
OR
jenkinsjenkinsMatch1.339
OR
jenkinsjenkinsMatch1.340
OR
jenkinsjenkinsMatch1.341
OR
jenkinsjenkinsMatch1.342
OR
jenkinsjenkinsMatch1.343
OR
jenkinsjenkinsMatch1.344
OR
jenkinsjenkinsMatch1.345
OR
jenkinsjenkinsMatch1.346
OR
jenkinsjenkinsMatch1.347
OR
jenkinsjenkinsMatch1.348
OR
jenkinsjenkinsMatch1.349
OR
jenkinsjenkinsMatch1.350
OR
jenkinsjenkinsMatch1.351
OR
jenkinsjenkinsMatch1.352
OR
jenkinsjenkinsMatch1.353
OR
jenkinsjenkinsMatch1.354
OR
jenkinsjenkinsMatch1.355
OR
jenkinsjenkinsMatch1.356
OR
jenkinsjenkinsMatch1.357
OR
jenkinsjenkinsMatch1.358
OR
jenkinsjenkinsMatch1.359
OR
jenkinsjenkinsMatch1.360
OR
jenkinsjenkinsMatch1.361
OR
jenkinsjenkinsMatch1.362
OR
jenkinsjenkinsMatch1.363
OR
jenkinsjenkinsMatch1.364
OR
jenkinsjenkinsMatch1.365
OR
jenkinsjenkinsMatch1.366
OR
jenkinsjenkinsMatch1.367
OR
jenkinsjenkinsMatch1.368
OR
jenkinsjenkinsMatch1.369
OR
jenkinsjenkinsMatch1.370
OR
jenkinsjenkinsMatch1.371
OR
jenkinsjenkinsMatch1.372
OR
jenkinsjenkinsMatch1.373
OR
jenkinsjenkinsMatch1.374
OR
jenkinsjenkinsMatch1.375
OR
jenkinsjenkinsMatch1.376
OR
jenkinsjenkinsMatch1.377
OR
jenkinsjenkinsMatch1.378
OR
jenkinsjenkinsMatch1.379
OR
jenkinsjenkinsMatch1.380
OR
jenkinsjenkinsMatch1.382
OR
jenkinsjenkinsMatch1.383
OR
jenkinsjenkinsMatch1.384
OR
jenkinsjenkinsMatch1.386
OR
jenkinsjenkinsMatch1.387
OR
jenkinsjenkinsMatch1.388
OR
jenkinsjenkinsMatch1.389
OR
jenkinsjenkinsMatch1.390
OR
jenkinsjenkinsMatch1.391
OR
jenkinsjenkinsMatch1.392
OR
jenkinsjenkinsMatch1.393
OR
jenkinsjenkinsMatch1.394
OR
jenkinsjenkinsMatch1.395
OR
jenkinsjenkinsMatch1.396
OR
jenkinsjenkinsMatch1.397
OR
jenkinsjenkinsMatch1.398
OR
jenkinsjenkinsMatch1.399
OR
jenkinsjenkinsMatch1.400
OR
jenkinsjenkinsMatch1.401
OR
jenkinsjenkinsMatch1.402
OR
jenkinsjenkinsMatch1.403
OR
jenkinsjenkinsMatch1.404
OR
jenkinsjenkinsMatch1.405
OR
jenkinsjenkinsMatch1.406
OR
jenkinsjenkinsMatch1.407
OR
jenkinsjenkinsMatch1.408
OR
jenkinsjenkinsMatch1.409
OR
jenkinsjenkinsMatch1.409.1
OR
jenkinsjenkinsMatch1.409.2
OR
jenkinsjenkinsMatch1.410
OR
jenkinsjenkinsMatch1.411
OR
jenkinsjenkinsMatch1.412
OR
jenkinsjenkinsMatch1.413
OR
jenkinsjenkinsMatch1.414
OR
jenkinsjenkinsMatch1.415
OR
jenkinsjenkinsMatch1.416
OR
jenkinsjenkinsMatch1.417
OR
jenkinsjenkinsMatch1.418
OR
jenkinsjenkinsMatch1.419
OR
jenkinsjenkinsMatch1.420
OR
jenkinsjenkinsMatch1.421
OR
jenkinsjenkinsMatch1.422
OR
jenkinsjenkinsMatch1.423
OR
jenkinsjenkinsMatch1.424
OR
jenkinsjenkinsMatch1.425
OR
jenkinsjenkinsMatch1.426
OR
jenkinsjenkinsMatch1.427
OR
jenkinsjenkinsMatch1.428
OR
jenkinsjenkinsMatch1.429
OR
jenkinsjenkinsMatch1.430
OR
jenkinsjenkinsMatch1.431
OR
jenkinsjenkinsMatch1.432
OR
jenkinsjenkinsMatch1.433
OR
jenkinsjenkinsMatch1.434
OR
jenkinsjenkinsMatch1.435
OR
jenkinsjenkinsMatch1.436
OR
jenkinsjenkinsMatch1.437
Node
cloudbeesjenkinsMatch1.400enterprise
OR
cloudbeesjenkinsMatch1.400.0.12enterprise
OR
cloudbeesjenkinsMatch1.424enterprise
OR
cloudbeesjenkinsMatch1.424.5enterprise
Node
cloudbeesjenkinsMatch1.400lts
OR
cloudbeesjenkinsMatch1.400.0.12lts

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%