Unscored severity · published Nov 16, 2012
CVE-2012-4612
Cross-site scripting (XSS) vulnerability in EMC RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x before 3.2.1 allows remote attackers to inject arbitrary…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in EMC RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RD
Rsa Data Protection Manager Appliance · Emc
2.7.0; 3.0; 3.1; 3.2 · source: NVD
RD
Rsa Data Protection Manager Software Server · Emc
2.7.0; 3.0; 3.1; 3.2 · source: NVD
Affected product
RD
Rsa Data Protection Manager Appliance
Emc
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4612
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4612
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-11/0050.html
www.securityfocus.com
http://www.securityfocus.com/bid/56506
More from Rsa Data Protection Manager Appliance
–
CVE-2013-3288
Cross-site scripting (XSS) vulnerability on the EMC RSA Data Protection Manager (DPM) appliance 3.2.x before 3.2.4.2 and 3.5.x before 3.5.1 allows remote attackers to inject…
–
CVE-2012-4613
EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for…