CVE-2012-2005

EPSS 3.41%
Veröffentlicht 02.05.2012 22:55:02
Zuletzt bearbeitet 16.06.2026 23:40:46
Erkennungen
Login

Cross-site scripting (XSS) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 9

NVD 33 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Hp ≫ Insight Management Agents Update b Version <= 8.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 6.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 6.31.0.0 Update b

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 6.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.0.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.10.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.20.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.40.1.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.41.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.50.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.51.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.60.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.80.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.90.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.91.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 7.95.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.0.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.1.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.5

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.10.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.11.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.15.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.20.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.22.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.26.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.50.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.60.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Hp ≫ Insight Management Agents Version 8.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version -
   Microsoft ≫ Windows Server 2008 Version - Edition x64

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.41%	0.873

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://secunia.com/advisories/49054

http://www.securityfocus.com/archive/1/522548

http://www.securityfocus.com/bid/53341

http://www.securitytracker.com/id?1027003

http://osvdb.org/81668

https://exchange.xforce.ibmcloud.com/vulnerabilities/75314

https://nvd.nist.gov/vuln/detail/CVE-2012-2005

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2005

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2005

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-2005