Lucene search

K
f5F5F5:K15900
HistoryDec 11, 2014 - 12:00 a.m.

K15900 : Apache HTTP server vulnerability CVE-2012-3499

2014-12-1100:00:00
my.f5.com
18

5.7 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.4%

Security Advisory Description

Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3) mod_ldap, (4) mod_proxy_ftp, and (5) mod_status modules. (CVE-2012-3499)

Impact

An attacker may be able to inject arbitrary web script or HTML.