CVE-2012-0324 : Detail

CVE-2012-0324

0.21%V4
2012-03-09
11h00 +00:00
Cross-site Scripting
A03-Injection
Network
2024-08-06
18h23 +00:00
CVE.org
NVD
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Kelola notifikasi

Deskripsi CVE

Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0325.

Informasi CVE

Kelemahan Terkait

CWE-ID Nama Kelemahan Sumber
CWE-79 Improper Neutralization of Input During Web Page Generation
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Metrik

Metrik Skor Tingkat keparahan CVSS Vektor Sumber
V2 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.
EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Cloudbees>>Jenkins >> Version 1.400

Cloudbees>>Jenkins >> Version 1.400.0.12

Cloudbees>>Jenkins >> Version 1.424

Cloudbees>>Jenkins >> Version 1.424.5

Konfigurasi 0

Cloudbees>>Jenkins >> Version 1.400

Cloudbees>>Jenkins >> Version 1.400.0.12

Konfigurasi 0

Cloudbees>>Jenkins >> Version Hingga (termasuk) 1.453

Jenkins>>Jenkins >> Version 1.301

Jenkins>>Jenkins >> Version 1.302

Jenkins>>Jenkins >> Version 1.303

Jenkins>>Jenkins >> Version 1.304

Jenkins>>Jenkins >> Version 1.305

Jenkins>>Jenkins >> Version 1.306

Jenkins>>Jenkins >> Version 1.307

Jenkins>>Jenkins >> Version 1.308

Jenkins>>Jenkins >> Version 1.309

Jenkins>>Jenkins >> Version 1.310

Jenkins>>Jenkins >> Version 1.311

Jenkins>>Jenkins >> Version 1.312

Jenkins>>Jenkins >> Version 1.313

Jenkins>>Jenkins >> Version 1.314

Jenkins>>Jenkins >> Version 1.315

Jenkins>>Jenkins >> Version 1.316

Jenkins>>Jenkins >> Version 1.317

Jenkins>>Jenkins >> Version 1.318

Jenkins>>Jenkins >> Version 1.319

Jenkins>>Jenkins >> Version 1.320

Jenkins>>Jenkins >> Version 1.321

Jenkins>>Jenkins >> Version 1.322

Jenkins>>Jenkins >> Version 1.323

Jenkins>>Jenkins >> Version 1.324

Jenkins>>Jenkins >> Version 1.325

Jenkins>>Jenkins >> Version 1.326

Jenkins>>Jenkins >> Version 1.327

Jenkins>>Jenkins >> Version 1.328

Jenkins>>Jenkins >> Version 1.329

Jenkins>>Jenkins >> Version 1.330

Jenkins>>Jenkins >> Version 1.331

Jenkins>>Jenkins >> Version 1.332

Jenkins>>Jenkins >> Version 1.333

Jenkins>>Jenkins >> Version 1.334

Jenkins>>Jenkins >> Version 1.335

Jenkins>>Jenkins >> Version 1.336

Jenkins>>Jenkins >> Version 1.337

Jenkins>>Jenkins >> Version 1.338

Jenkins>>Jenkins >> Version 1.339

Jenkins>>Jenkins >> Version 1.340

Jenkins>>Jenkins >> Version 1.341

Jenkins>>Jenkins >> Version 1.342

Jenkins>>Jenkins >> Version 1.343

Jenkins>>Jenkins >> Version 1.344

Jenkins>>Jenkins >> Version 1.345

Jenkins>>Jenkins >> Version 1.346

Jenkins>>Jenkins >> Version 1.347

Jenkins>>Jenkins >> Version 1.348

Jenkins>>Jenkins >> Version 1.349

Jenkins>>Jenkins >> Version 1.350

Jenkins>>Jenkins >> Version 1.351

Jenkins>>Jenkins >> Version 1.352

Jenkins>>Jenkins >> Version 1.353

Jenkins>>Jenkins >> Version 1.354

Jenkins>>Jenkins >> Version 1.355

Jenkins>>Jenkins >> Version 1.356

Jenkins>>Jenkins >> Version 1.357

Jenkins>>Jenkins >> Version 1.358

Jenkins>>Jenkins >> Version 1.359

Jenkins>>Jenkins >> Version 1.360

Jenkins>>Jenkins >> Version 1.361

Jenkins>>Jenkins >> Version 1.362

Jenkins>>Jenkins >> Version 1.363

Jenkins>>Jenkins >> Version 1.364

Jenkins>>Jenkins >> Version 1.365

Jenkins>>Jenkins >> Version 1.366

Jenkins>>Jenkins >> Version 1.367

Jenkins>>Jenkins >> Version 1.368

Jenkins>>Jenkins >> Version 1.369

Jenkins>>Jenkins >> Version 1.370

Jenkins>>Jenkins >> Version 1.371

Jenkins>>Jenkins >> Version 1.372

Jenkins>>Jenkins >> Version 1.373

Jenkins>>Jenkins >> Version 1.374

Jenkins>>Jenkins >> Version 1.375

Jenkins>>Jenkins >> Version 1.376

Jenkins>>Jenkins >> Version 1.377

Jenkins>>Jenkins >> Version 1.378

Jenkins>>Jenkins >> Version 1.379

Jenkins>>Jenkins >> Version 1.380

Jenkins>>Jenkins >> Version 1.382

Jenkins>>Jenkins >> Version 1.383

Jenkins>>Jenkins >> Version 1.384

Jenkins>>Jenkins >> Version 1.386

Jenkins>>Jenkins >> Version 1.387

Jenkins>>Jenkins >> Version 1.388

Jenkins>>Jenkins >> Version 1.389

Jenkins>>Jenkins >> Version 1.390

Jenkins>>Jenkins >> Version 1.391

Jenkins>>Jenkins >> Version 1.392

Jenkins>>Jenkins >> Version 1.393

Jenkins>>Jenkins >> Version 1.394

Jenkins>>Jenkins >> Version 1.395

Jenkins>>Jenkins >> Version 1.396

Jenkins>>Jenkins >> Version 1.397

Jenkins>>Jenkins >> Version 1.398

Jenkins>>Jenkins >> Version 1.399

Jenkins>>Jenkins >> Version 1.400

Jenkins>>Jenkins >> Version 1.401

Jenkins>>Jenkins >> Version 1.402

Jenkins>>Jenkins >> Version 1.403

Jenkins>>Jenkins >> Version 1.404

Jenkins>>Jenkins >> Version 1.405

Jenkins>>Jenkins >> Version 1.406

Jenkins>>Jenkins >> Version 1.407

Jenkins>>Jenkins >> Version 1.408

Jenkins>>Jenkins >> Version 1.409

Jenkins>>Jenkins >> Version 1.409.1

Jenkins>>Jenkins >> Version 1.409.2

Jenkins>>Jenkins >> Version 1.410

Jenkins>>Jenkins >> Version 1.411

Jenkins>>Jenkins >> Version 1.412

Jenkins>>Jenkins >> Version 1.413

Jenkins>>Jenkins >> Version 1.414

Jenkins>>Jenkins >> Version 1.415

Jenkins>>Jenkins >> Version 1.416

Jenkins>>Jenkins >> Version 1.417

Jenkins>>Jenkins >> Version 1.418

Jenkins>>Jenkins >> Version 1.419

Jenkins>>Jenkins >> Version 1.420

Jenkins>>Jenkins >> Version 1.421

Jenkins>>Jenkins >> Version 1.422

Jenkins>>Jenkins >> Version 1.423

Jenkins>>Jenkins >> Version 1.424

Jenkins>>Jenkins >> Version 1.425

Jenkins>>Jenkins >> Version 1.426

Jenkins>>Jenkins >> Version 1.427

Jenkins>>Jenkins >> Version 1.428

Jenkins>>Jenkins >> Version 1.429

Jenkins>>Jenkins >> Version 1.430

Jenkins>>Jenkins >> Version 1.431

Jenkins>>Jenkins >> Version 1.432

Jenkins>>Jenkins >> Version 1.433

Jenkins>>Jenkins >> Version 1.434

Jenkins>>Jenkins >> Version 1.435

Jenkins>>Jenkins >> Version 1.436

Jenkins>>Jenkins >> Version 1.437

Referensi

http://jvndb.jvn.jp/jvndb/JVNDB-2012-000022
Tags : third-party-advisory, x_refsource_JVNDB
http://www.securityfocus.com/bid/52384
Tags : vdb-entry, x_refsource_BID
http://jvn.jp/en/jp/JVN14791558/index.html
Tags : third-party-advisory, x_refsource_JVN
Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.