Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-4600HistoryAug 31, 2012 - 2:55 p.m.
CVE-2012-4600
2012-08-3114:55:01
Debian Security Bug Tracker
security-tracker.debian.org
15
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
EPSS
0.003
Percentile
66.2%
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with nested HTML tags.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | otrs2 | < 3.1.7+dfsg1-5 | otrs2_3.1.7+dfsg1-5_all.deb |
Related
prion
prion
Cross site scripting
2012-08-31 14:55:00
nessus
nessus
FreeBSD : otrs -- XSS vulnerability in Firefox and Opera (95a69d1a-52a5-11e2-a289-1c4bd681f0cf)
2013-01-02 00:00:00
FreeBSD : otrs -- XSS vulnerability in Firefox and Opera could lead to remote code execution (d60199df-7fb3-11e2-9c5a-000d601460a4)
2013-02-26 00:00:00
openSUSE Security Update : otrs (openSUSE-SU-2012:1214-1)
2014-06-13 00:00:00
freebsd
freebsd
otrs -- XSS vulnerability in Firefox and Opera could lead to remote code execution
2012-08-30 00:00:00
otrs -- XSS vulnerability in Firefox and Opera
2012-08-30 00:00:00
ubuntucve
ubuntucve
CVE-2012-4600
2012-08-31 00:00:00
openvas
openvas
OTRS Email Message XSS Vulnerability (OSA-2012-02)
2013-09-25 00:00:00
Debian: Security Advisory (DSA-2536-1)
2012-09-07 00:00:00
cert
cert
Open Technology Real Services nested tags cross-site scripting vulnerability
2012-08-30 00:00:00
packetstorm
packetstorm
OTRS Open Technology Real Services 3.1.8 / 3.1.9 XSS
2012-08-31 00:00:00
cvelist
cvelist
CVE-2012-4600
2012-08-31 14:00:00
cve
cve
CVE-2012-4600
2012-08-31 14:55:01
nvd
nvd
CVE-2012-4600
2012-08-31 14:55:01
exploitdb
exploitdb
OTRS Open Technology Real Services 3.1.8/3.1.9 - Cross-Site Scripting
2012-08-31 00:00:00
OTRS 3.1 - Persistent Cross-Site Scripting
2012-10-18 00:00:00
osv
osv
otrs-3.3.16-37.1 on GA media
2024-06-15 00:00:00
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
EPSS
0.003
Percentile
66.2%
Related for DEBIANCVE:CVE-2012-4600