Lucene search

[email protected]CVE-2012-2161

HistoryJun 20, 2012 - 10:27 a.m.

CVE-2012-2161

2012-06-2010:27:28

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-2161

cross-site scripting

xss

vulnerability

ibm

eclipse help system

deferredview.jsp

iehs

security appscan

spss data collection developer library

remote attackers

web script

html

crafted url

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.0%

JSON

Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected configurations

NVD

Node

ibmsecurity_appscan_sourceMatch7.0

ibmsecurity_appscan_sourceMatch8.0

ibmsecurity_appscan_sourceMatch8.0.0.1

ibmsecurity_appscan_sourceMatch8.0.0.2

ibmsecurity_appscan_sourceMatch8.5

ibmsecurity_appscan_sourceMatch8.5.0.1

Node

ibmspss_data_collectionMatch6.0

ibmspss_data_collectionMatch6.0.1

CPENameOperatorVersion
ibm:security_appscan_sourceibm security appscan sourceeq7.0
ibm:security_appscan_sourceibm security appscan sourceeq8.0
ibm:security_appscan_sourceibm security appscan sourceeq8.0.0.1
ibm:security_appscan_sourceibm security appscan sourceeq8.0.0.2
ibm:security_appscan_sourceibm security appscan sourceeq8.5
ibm:security_appscan_sourceibm security appscan sourceeq8.5.0.1

CPE	Name	Operator	Version
ibm:security_appscan_source	ibm security appscan source	eq	7.0
ibm:security_appscan_source	ibm security appscan source	eq	8.0
ibm:security_appscan_source	ibm security appscan source	eq	8.0.0.1
ibm:security_appscan_source	ibm security appscan source	eq	8.0.0.2
ibm:security_appscan_source	ibm security appscan source	eq	8.5
ibm:security_appscan_source	ibm security appscan source	eq	8.5.0.1