XSS in Redhat Certificate_system
CVE-2012-2662
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.014 (69.0th percentile) — read the EPSS interpretation.
Affected products
- Redhat Certificate_system — versions 7.1, 7.2, 7.3
- Redhat Dogtag_certificate_system
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
- secalert@redhat.com (vdb-entry, x_refsource_XF)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)