Search for vulnerabilities
Vulnerability ID | VCID-5pym-dgvf-aaaf |
Aliases |
CVE-2012-2582
|
Summary | Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an arbitrary element or (2) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element. |
Status | Published |
Exploitability | 2.0 |
Weighted Severity | 3.9 |
Risk | 7.8 |
Affected and Fixed Packages | Package Details |
Data source | Exploit-DB |
---|---|
Date added | Aug. 8, 2012 |
Description | OTRS Open Technology Real Services 3.1.4 - Persistent Cross-Site Scripting |
Ransomware campaign use | Known |
Source publication date | Aug. 8, 2012 |
Exploit type | webapps |
Platform | windows |
Source update date | Aug. 8, 2012 |
Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
Percentile | 0.78489 |
EPSS Score | 0.00611 |
Published At | Dec. 17, 2024, midnight |
Date | Actor | Action | Source | VulnerableCode Version |
---|---|---|---|---|
There are no relevant records. |