Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2012-4751
HistoryOct 22, 2012 - 4:55 p.m.

CVE-2012-4751

2012-10-2216:55:01
Debian Security Bug Tracker
security-tracker.debian.org
16

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.005

Percentile

76.3%

JSON

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11 allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with whitespace before a javascript: URL in the SRC attribute of an element, as demonstrated by an IFRAME element.

OSVersionArchitecturePackageVersionFilename
Debian11allotrs2< 3.1.7+dfsg1-6otrs2_3.1.7+dfsg1-6_all.deb

Related

cvelist 1
packetstorm 1
nessus 5
nvd 1
freebsd 2
ubuntucve 1
openvas 3
prion 1
cve 1
cert 1
exploitdb 2
osv 2
debian 2
cvelist
cvelist
CVE-2012-4751
2012-10-22 16:00:00
packetstorm
packetstorm
OTRS 3.1 Cross Site Scripting
2012-10-18 00:00:00
nessus
nessus
FreeBSD : otrs -- XSS vulnerability could lead to remote code execution (84065569-7fb4-11e2-9c5a-000d601460a4)
2013-02-26 00:00:00
FreeBSD : otrs -- XSS vulnerability (13320091-52a6-11e2-a289-1c4bd681f0cf)
2013-01-02 00:00:00
openSUSE Security Update : otrs (openSUSE-2012-838)
2014-06-13 00:00:00
nvd
nvd
CVE-2012-4751
2012-10-22 16:55:01
freebsd
freebsd
otrs -- XSS vulnerability
2012-10-16 00:00:00
otrs -- XSS vulnerability could lead to remote code execution
2012-10-16 00:00:00
ubuntucve
ubuntucve
CVE-2012-4751
2012-10-22 00:00:00
openvas
openvas
OTRS Email Body XSS Vulnerability (OSA-2012-03)
2013-09-25 00:00:00
Debian Security Advisory DSA 2733-1 (otrs2 - SQL injection)
2013-08-02 00:00:00
Debian: Security Advisory (DSA-2733-1)
2013-08-01 00:00:00
prion
prion
Cross site scripting
2012-10-22 16:55:00
cve
cve
CVE-2012-4751
2012-10-22 16:55:01
cert
cert
OTRS contains a cross-site scripting vulnerability
2012-10-17 00:00:00
exploitdb
exploitdb
OTRS 3.1 - Persistent Cross-Site Scripting
2012-10-18 00:00:00
OTRS Open Technology Real Services 3.1.8/3.1.9 - Cross-Site Scripting
2012-08-31 00:00:00
osv
osv
otrs2 - SQL injection
2013-08-02 00:00:00
otrs-3.3.16-37.1 on GA media
2024-06-15 00:00:00
debian
debian
[SECURITY] [DSA 2733-1] otrs2 security update
2013-08-02 20:25:45
[SECURITY] [DSA 2733-1] otrs2 security update
2013-08-02 20:25:45

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.005

Percentile

76.3%

JSON
Related for DEBIANCVE:CVE-2012-4751
cvelist1packetstorm1nessus5nvd1freebsd2ubuntucve1openvas3prion1cve1cert1exploitdb2osv2debian2