Unscored severity · published Dec 25, 2012
CVE-2012-0428
Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows remote attackers to inject arbitrary web script or HTML via…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ED
Edirectory · Microfocus
8.8.6.0; 8.8.6.1; 8.8.6.2; 8.8.6.3; 8.8.6.4; 8.8.6.5; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0428
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0428
www.novell.com
http://www.novell.com/support/kb/doc.php?id=3426981
Vendor Advisory
http://www.novell.com/support/kb/doc.php?id=7011539
www.securitytracker.com
http://www.securitytracker.com/id?1027911
bugzilla.novell.com
https://bugzilla.novell.com/show_bug.cgi?id=772899
More from Edirectory
9.8
CVE-2021-38132
Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory
9.8
CVE-2017-9285
NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services
9.1
CVE-2021-22533
Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.4.0000
8.8
CVE-2017-7429
The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute…
7.5
CVE-2021-22532
Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before 9.2.4.0000