CVE-2012-2005

EPSS 0.75%
Published 02.05.2012 22:55:02
Last modified 11.04.2025 00:51:21
Source hp-security-alert@hp.com
Teams watchlist Login
Open Login

Cross-site scripting (XSS) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products Warnungen 0 Metrics 2 CWE 1 References 9

Data is provided by the National Vulnerability Database (NVD)

Hp ≫ Insight Management Agents Updateb Version <= 8.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version6.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version6.31.0.0 Updateb

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version6.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.0.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.10.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.20.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.40.1.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.41.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.50.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.51.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.60.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.80.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.90.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.91.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.95.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.0.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.1.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.5

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.10.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.11.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.15.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.20.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.22.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.26.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.50.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.60.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.75%	0.723

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://secunia.com/advisories/49054

http://www.securityfocus.com/archive/1/522548

http://www.securityfocus.com/bid/53341

http://www.securitytracker.com/id?1027003

http://osvdb.org/81668

https://exchange.xforce.ibmcloud.com/vulnerabilities/75314

https://nvd.nist.gov/vuln/detail/CVE-2012-2005

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2005

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2005

EUVD