XSS in Red Hat Certificate System
CVE-2012-2662
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.014 (70.5th percentile) — read the EPSS interpretation.
Affected products
- Redhat Certificate_system — versions 7.1, 7.2, 7.3
- Redhat Dogtag_certificate_system
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
- secalert@redhat.com (vdb-entry, x_refsource_XF)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)