CVE-2012-2536

2012-09-1118:55:01

CWE-79

microsoft

web.nvd.nist.gov

128

cve-2012-2536

cross-site scripting

xss vulnerability

microsoft systems management server 2003

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.1

Confidence

High

EPSS

0.952

Percentile

99.4%

JSON

Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka “Reflected XSS Vulnerability.”

Affected configurations

Nvd

Node

microsoftsystem_center_configuration_managerMatch2007sp2

microsoftsystems_management_serverMatch2003sp2

VendorProductVersionCPE
microsoftsystem_center_configuration_manager2007cpe:2.3:a:microsoft:system_center_configuration_manager:2007:sp2:*:*:*:*:*:*
microsoftsystems_management_server2003cpe:2.3:a:microsoft:systems_management_server:2003:sp2:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	system_center_configuration_manager	2007	cpe:2.3:a:microsoft:system_center_configuration_manager:2007:sp2::::::
microsoft	systems_management_server	2003	cpe:2.3:a:microsoft:systems_management_server:2003:sp2::::::