What is CVE-2012-2289?

CVE-2012-2289 is a vulnerability in EMC Applicationxtender Desktop, classified under CWE-264. Published 2012-08-26.

Is CVE-2012-2289 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in EMC Applicationxtender Desktop

CVE-2012-2289

EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2 allow remote attackers to upload files to any location, and possibly execute arbitrary code, via unspecified vectors.

EPSS: 0.054 (91.9th percentile) — read the EPSS interpretation.

Affected products

Emc Applicationxtender_desktop
Emc Applicationxtender_web_access_.net
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2012-2289?: CVE-2012-2289 is a vulnerability in EMC Applicationxtender Desktop, classified under CWE-264. Published 2012-08-26.
Is CVE-2012-2289 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.