XSS in Microsoft System Center Configuration Manager
CVE-2012-2536
Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.162 (96.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft System_center_configuration_manager — versions 2007
- Microsoft Systems_management_server — versions 2003
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_BID)