CVE-2012-2005

EPSS 0.75%
Veröffentlicht 02.05.2012 22:55:02
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle hp-security-alert@hp.com
Teams Watchlist Login
Unerledigt Login

Cross-site scripting (XSS) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Hp ≫ Insight Management Agents Updateb Version <= 8.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version6.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version6.31.0.0 Updateb

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version6.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.0.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.10.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.20.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.40.1.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.41.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.50.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.51.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.60.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.80.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.90.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.91.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version7.95.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.0.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.1.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.5

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.10.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.11.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.15.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.20.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.22.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.26.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.30.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.40.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.50.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.60.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Hp ≫ Insight Management Agents Version8.70.0.0

   Microsoft ≫ Windows 2003 Server
   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2008 Version-
   Microsoft ≫ Windows Server 2008 Version- Editionx64

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.75%	0.723

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://secunia.com/advisories/49054

http://www.securityfocus.com/archive/1/522548

http://www.securityfocus.com/bid/53341

http://www.securitytracker.com/id?1027003

http://osvdb.org/81668

https://exchange.xforce.ibmcloud.com/vulnerabilities/75314

https://nvd.nist.gov/vuln/detail/CVE-2012-2005

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2005

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2005

EUVD