Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-2399
HistoryApr 21, 2012 - 12:00 a.m.

CVE-2012-2399

2012-04-2100:00:00
ubuntu.com
ubuntu.com
19

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.034 Low

EPSS

Percentile

91.5%

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFupload
2.2.0.1 and earlier, as used in WordPress before 3.5.2, TinyMCE Image
Manager 1.1 and earlier, and other products allows remote attackers to
inject arbitrary web script or HTML via the buttonText parameter, a
different vulnerability than CVE-2012-3414.

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.034 Low

EPSS

Percentile

91.5%